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THE PRESIDENT’S PAGE 


NTERNAL auditing has gone through a significant process of evolu- 

tion: from its beginnings when it was primarily concerned with fraud 
prevention and verification of records—to a control appraisal function re- 
porting high in management. 


One reason for this dynamic development has been the crystalization of 
concepts of control in business. We now find the basic elements of control 
organization structure, procedures, records, reports and standards of per- 
formance in every department of the business. Internal auditing appraises 
these other control elemerits. At the same time the checks and balances 
built into the control structure should protect the business against fraud, 
waste and loss. 


Many internal auditors have been able to move forward with manage 
ment’s acceptance of these control concepts. We now find a new type of 
personality emerging—which I have called the “modern internal auditor.” 


These internal auditors have moved from the low paid bookkeeper type 
characterization—to one whose opinions are highly respected in his organ 
ization—to one who reports high in his management and is compensated 
accordingly. 


In my travels in THe Institute, I constantly find high type of talent 
available—men who think as modern internal auditors and have the personal 
attributes to carry out internal auditing in terms of THe Institute's 
“Statement of Responsibilities.” 


Tue INstTiTUTE will continue to progress, if you seek out these men 
these modern internal auditors to lead your chapters and important com 
mittees in the future. These are the men who can truly “Promote Modern 
Internal Auditing Concepts” and lead the way for an even better life for 
all in the profession. 


C. H. NaGLe 
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AUDITORS AND ELECTRONICS 


The advent of electronic data processing has brought forth reactions 
from auditors ranging from deep suspicion of a process that creates prob- 
lems such as “invisible records” to high hopes that EDP will mean the 
attainment of a far greater stage of perfection than heretofore dreamed of. 
This article discusses an auditor’s experience with electronics in terms 
of in-line accounting, special audit trails, opportunity for auditing EDP, 
program control, test cases, electronic audit programs (with examples of 
payroll and accounts receivable) and training the auditor for EDP. 


Kenneth G. Cadematori is a manager on the audit staff of Price Water- 
house & Co., with which he has been associated for several years. He is a 
graduate of Fordham University and has taught at Fairleigh Dickinson 
University. Mr. Cadematori is a CPA and a member of the American 
Institute of CPAs. He is the author of several articles on electronics and 
has given a number of talks on the subject, one at the 1960 international 
conference of THe INSTITUTE OF INTERNAL AUDITORS. 


AUDITING BRANCH OPERATIONS 


How best to report to management on the operations of widely dis- 
persed branches performing similar operations is a problem faced by many 
large organizations. The United States Air Force, with over 200 bases 
scattered throughout this country and many foreign countries, has adopted 
a program of directed audits in an attempt to better resolve this situation. 
“The Directed Audit Program of the Auditor General, USAF” is a discus- 
sion of this program in detail and of reactions to it from both clients and 
the audit agency. 


Major Thomas E. Dorn, Jr., has been a member of the Auditor General 
organization of the United States Air Force for several years, serving on 
every level to include the operating as a resident auditor, the supervisory 
at district level, and the policy at Headquarters USAF. Prior to joining 
the Air Force Major Dorn was a teaching assistant at the University of 
Southern California. He holds an M.A. in business administration from 
the University of Kentucky and did further graduate work at the University 
of Southern California. Major Dorn is a member of Tue INsTITUTE OF 
INTERNAL AUDITORS. 
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EFFECTIVE INTERNAL AUDIT REPORTS 


The audit report represents the sum of the auditor’s work. The quality 
of the report can mean the difference between success and failure for the 
auditor in gaining management acceptance of his recommendations. This 
article applies the six questions—who, what, when, where, why and how— 
to audit reports and discusses the basic ingredients of a report. The quality 
of the material, brevity and clarity in writing, methods to attract and hold 
the reader’s attention and the impact on the reader are all discussed. 


John P. Trimble is Chief Accountant for Tennessee del Ecuador SA. 
Prior to this he was Audit Supervisor of the electronic data processing 
center of Gulf Oil Corporation in Houston. He is a graduate of the Uni- 
versity of Illinois, where he majored in accounting and economics, and is a 
member of Tue INsTITUTE OF INTERNAL AUDITORS. 


THE BROADENED ROLE OF INTERNAL AUDITING 


Broadening of the role of internal auditing, a process which has moved 
steadily forward, has brought forth many different ideas as to just how far 
the audit should go. One school of thought states that only the control 
features of a function should be appraised. Another feels that the internal 
auditors should appraise the function itself. Are internal auditors competent 
to appraise a function rather than just the internal controls in that function ? 
This article presents a provocative discussion of the broad role concept and 
proposes clarifications of that concept expressed in the Statement of Re- 
sponsibilities of the Internal Auditor. The author discusses ways to sell the 
concept to management and how to gain maximum benefit from the broad- 
ened role of internal auditing. 


Murray Kane is Comptroller, Airtemp Division, Dayton Plant, of 
Chrysler Corporation. Prior to this he was a staff auditor and assistant 
manager—corporate audit department, Chrysler Corporation. Mr. Kane 
received a B.B.A. degree from the City College of New York and an LL.B. 
from Brooklyn Law School. He is a member of the Society for the Ad- 
vancement of Management and THe INstTiITuTE oF INTERNAL AUDITORS. 


THE AUDITEE’S VIEWPOINT 


Much has been written on the internal auditor and operational audit- 
ing—methods of performing such audits and ways of working with the 
personnel of the operating departments. But how do the auditees react 
to such audits? “Internal Auditing from the Viewpoint of the Auditee” 
discusses the experiences of the Stamping Division of the Chrysler Corpo- 
ration with operational audits. The preliminary planning, scope of the audit, 
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problems encountered and distribution and reaction to the final report are 
all presented. The author follows with suggestions to auditors on conduct 
of audits of nonfinancial areas. 


D. A. Milton is Plant Manager, Eight Mile Plant, Stamping Group, 
Chrysler Corporation. He has held a number of responsible positions with 
the Chrysler Corporation and before joining that company was associated 
with Touche, Niven, Bailey and Smart. Mr. Milton is a graduate of Wayne 
State University and is a CPA and a member of the American Institute 


of CPAs. 


CONTROLLED FRAUD—YES OR NO ? 


In his book, The Thief in the White Collar, Norman Jaspan suggests 
various means for testing the efficacy of controls. One such method is 
introduction of controlled errors—a method repugnant to some, welcome 
to others. Because of its potential importance and controversial nature 
this subject was presented to various prominent INsTITUTE members for 
comment. One pro and five con answers were received and are printed in 
this issue in the Readers’ Problem Clinic. It is our hope that this presenta- 
tion will start a further inquiry into the merits and shortcomings of such 
an approach. All comments are welcome. 














AN AUDITOR’S EXPERIENCE WITH 
ELECTRONICS* 
By KENNETH G. CADEMATORI 


Manager, Price Waterhouse & Co. 


N the 100-year life of the auditing profession, seldom has any change 
in the methods of record keeping caused such great interest and concern 
among auditors as has electronic data processing. 


The considerable attention being given to this subject is an indication 
that there is as yet no conclusion to which all will subscribe. 


To some auditors, electronic data processing must be approached wit! 
suspicion, for it brings with it such problems as “invisible records,” 1.c.., 
numerous complex computations and logical decisions made by electronic 
circuits, with the results stored as magnetic bits on reels of magnetic tape 


There is also the danger caused by the elimination of the controls 
normally provided by human review and division of duties: the essential 
feature of electronic data processing is that the data processing is done 
entirely by electronic equipment which is controlled, and often understood, 
by only a few employees. 


Contrary to those auditors who look upon EDP with suspicion, there 
are those who have nothing but high hopes for how it will affect auditing 
The vice president of a large midwestern bank has stated that: 


. .. to the auditor or comptroller who will learn the basic principles 
of automation and electronic data processing, new avenues of testing. 
spot-checking and verifying will open up. . . . The use of electronic 
equipment will bring the field of audit and control to a stage of perfec- 
tion never before imagined or even dreamed of.” 


My experience and that of my associates indicates there is truth in 
both of these contrary positions. But one position holds much greater sig- 
nificance for the auditor. 


To determine which, we must begin by first placing EDP in its proper 
perspective with regard to the objectives of the auditor. 


AUDITING OBJECTIVES 


The objectives of auditing can be reduced to three essential functions. 
They are: 


* Presented at a Southwest Regional Conference 
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1. To determine that the source accounting data validly records the 
occurrence of a transaction or the existence of an asset or liability. 


2. To check the accuracy of the processing and summarizing of the 
course accounting data. 


3. To review the completeness of the disclosure of the processed and 
summarized data in financial reports. 


The greatest impact of EDP on auditing is, of course, on the second 
objective, that of checking the accuracy of the processing and summarizing 
of source accounting data. It is here that the information trail followed 
by the auditor has been altered. The intermediary listings and summaries, 
common to manual and mechanical accounting systems, are not found in 
well integrated automated data processing systems. 


CONVENTIONAL AUDIT APPROACH 


How under such conditions can the auditor carry out his conventional 
audit techniques? This has not been the problem it was thought to be. The 
auditor will generally find that management has taken advantage of the 
high speed of electronic printers (500 to 900 lines a minute) and their flexi- 
bility to produce extensive printouts of the results of the data processing. 
The information contained in these printouts usually exceeds that formerly 
available. Frequently the printouts will contain in one organized listing 
data that was previously included on a number of intermediary listings or 
in tabulating card files. Typical of the printouts of an EDP system are: 


1. Payroll registers recording weekly, and even year to date, salary 
and tax amounts ; the full details of as many as 30 deductions ; hour- 
ly pay rate; position title; accrued sick leave; etc. 


2. Material issued from inventory may appear in two records, each 
showing quantity, price and extension; the first in stock number 
sequence and the second in order by account charged. 


3. Cash receipts listings showing the usual payor information and 
amounts and also the batch and sequence number in which the trans- 
mitting documents are filed. 


Obviously such printouts will provide the auditor with the full details 
of the data processed and give him a direct reference to the source docu- 
ments necessary to check the accuracy of the processing. Those of you who 
have struggled to reconstruct transactions recorded only on uninterpreted 
tabulating cards will, I am sure, appreciate the EDP printouts. 
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IN-LINE ACCOUNTING 


I have been encouraged to find that even the most potentially difficult 
to audit form of electronic data processing—the in-line accounting system 
using a large permanent internal storage—has not in my experience proven 
to be a great problem for the auditor. As an example, I can cite an IBM 
305 Ramac used at an Air Force base to record and control supplies and 
to prepare and price charge requisitions for material issued to other bases. 


As in most systems of this type, the current data being posted to the 
internal storage wipes out the prior information, leaving no record of the 
prior information. In this installation, each issue and receipt is posted to 
the internal memory updating and eliminating the previous balance stored 
there. Each receipt also creates a new average cost which wipes out the 
previous average cost; as the prior balance of quantity and dollars is also 
eliminated, no information is left to allow the checking of the computation 
of the new average price. 


However, the auditor’s case is far from hopeless. First, he has complete 
printouts of each day’s transactions. Each stock item identifies the date 
of the last previous transaction, permitting direct reference to the appro- 
priate transaction printout. A second audit trail is provided by the input 
tabulating cards which are filed by stock item. 


The explanation of why the auditor has not had difficulty in finding 
an audit trail in EDP systems is very understandable. The information 
needed by the auditor to satisfy himself is usually the same information 
that management requires with greater frequency to operate and control the 
organization. While the auditor may require the details of amounts owing 
to the organization once a year, for the purpose of confirming with the 
debtor, management requires the same data throughout the year for answer- 
ing inquiries and checking credit limitations. 


SPECIAL AUDIT TRAILS 


3efore proceeding further, I should like to make clear that my com- 
ments on the adequacy of audit trail in EDP systems apply to the condi- 
tions usually encountered. There have been occasions when the auditor has 
had to require that specific provision be made in the EDP system to pro- 
vide him with a practicable audit trail. But this situation—where the 
information is required solely for audit purposes—is rare and can usually 
be simply resolved at the time of the original programming. This is one 
of the strongest arguments for having the auditor participate in the planning 
Stage. 
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A second type of request the auditor has had to make is that source 
input data be sufficiently controlled, reviewed and approved to serve as 
suitable evidence of the propriety of the transactions. There is a tendency 
to over-automate the preparation of source documents and their authoriza- 
tion. In this desire for efficiency, it is sometimes forgotten that in addition 
to serving as input to the processing system, the source record must fix the 
responsibility for the transactions. This is necessary for the investigations 
made by the auditor and is equally necessary for the proper functioning of 
management. 


SIGNIFICANCE OF EDP FOR AUDITING 


If, as I have indicated, EDP has not presented any insurmountable 
challenge to auditing, you may rightfully ask—‘does it hold any vital 
significance for auditing ?” 


This can be answered in two ways. First, most EDP installations to 
date have been rather conservatively planned and frequently confined to 
functions such as payroll and stores accounting which are easily controlled. 
However, as management’s experience and confidence grows, we are wit- 
nessing a move into less controlled areas; and, more significantly, to the 
use of EDP to perform management control functions themselves. An oil 
company has developed an application whereby the system, when process- 
ing inventory transactions, will detect low stock balances and automatically 
issue purchase orders to replenish the stock. When the material is received, 
the receiving report and invoice date are entered into the system and are 
compared internally with the previously stored purchase order information. 
If all is in agreement, a check is prepared for payment. (Of course, the 
check is signed by a check-signing machine.) In effect, the entire vouching 
operation and payment authorization is performed without human review ! 


This use of EDP to perform such management control functions without 
any visible evidence of review or human authorization poses obvious head- 
aches to the auditor. 


Matters will be made still more difficult as the growing trend toward 
“management by exception” becomes widespread in EDP applications. The 
“management by exception” approach to EDP is to have the system print 
out only the details of conditions requiring action by management. Reliance 
is placed on the equipment’s decision that all other conditions are normal 
and that management need not concern itself with the details thereof. Such 
details will be recorded only in internal memory or on magnetic tape. 
Can the auditor accept the decision made by equipment? Does he fulfill his 
responsibilities by placing a trust in electronic circuitry that he would not 
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place in operating personnel? I think not, so long as there are personnel 
who direct, and can misdirect, the electronic system. 


Accordingly, the first reply to the question of what significance EDP 
holds for auditing is that EDP applications are becoming both bolder in 
their extension to management control functions and more sophisticated 
in the use of management by exception techniques. These advances will 
present new audit problems not generally encountered in earlier installa- 
tions. They will require the auditor to develop new techniques for satisfying 
himself in the absence of visible records and human review and authoriza 
tion. 


OPPORTUNITY FOR AUDITING OF EDP 


The second reply to the question of what significance EDP holds for 
auditing is a corollary to the first; but it is of greater importance in its 
own right. 


The reply is this: We have all witnessed the continuing growth in 
recent years of large organizations. Such organizations participate annually 
in millions of transactions. In this type of organization top management 
is considerably removed from the details of operation. They need the 
services of auditors to assure them of the reliability and completeness of 
information presented to them about the operations. Yet, in this circum- 
stance where he can be of greatest value, the auditor is restricted to general 
and over-all comments because with his manual checking techniques he 
cannot economically penetrate the millions of transactions in order to check 
individual transactions. 


It is my belief that electronic data processing is the salvation of the 
auditor in these circumstances. By learning and using its abilities the 
auditor can quickly and economically penetrate the huge number of trans 
actions and determine which are the overwhelming majority that are normal 
and correct based on standards established by the auditer. Aided by 
EDP, with a minimum of effort he can isolate, and to some extent even 
check, the individual unusual transactions requiring his attention. 


In summary, I believe the auditor, and here I mean principally the 
internal auditor and to a lesser extent the external auditor, is afforded 
an opportunity by using EDP for his purposes to efficiently restore much 
of the check of details that he was forced to retreat from in the face of 
the growing size of organizations. In using EDP for his purposes, the 
auditor will find that he has at the same time resolved the need to develop 
new techniques to audit EDP. 
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USING EDP TO AUDIT 


How may the auditor use the EDP equipment to aid his examination? 
This is not a new subject. It has been considered by auditors for the past 
few years and certain techniques have been developed and put in practice. | 
These techniques fall into two general categories; first, those designed to 
check the programming and operation of the system; and second, those | 
designed to audit the records produced by the EDP system. 





The following are some of the techniques designed to check the pro- 
gramming and the operation of the EDP system. 


PROGRAM CONTROL 


The use of the program control techniques has been suggested where 
the auditor has been very close to the development of the system and has 
reviewed and checked the instruction program designed to operate the 
system. To carry out this technique the auditor must first obtain a copy 
of the instruction program which he has reviewed and checked. All subse- 
quent changes to this program must also be submitted to the auditor for 
his review and inclusion in his copy of the program. 





The auditor can make use of his copy of the instruction program in 
two ways: 


a. He can, on a surprise basis, have his copy of the program compared 
with the program used during the actual processing of data. This 
should establish whether the program used for actual processing is 
the authorized program. 


b. The auditor may request that data previously processed with the 
operating copy of the program be reprocessed with his copy of the 
program and the end results compared. This method has the addi- 
tional advantage of also checking any intervention by the machine 
operator. 


Although the successful use of controlled copies of instruction pro- 
grams has been reported, a word of caution is in order. Often in the early 
stages of the use of a program a great many changes are required by events 
brought to light by the actual operation of the program with live data. 
In addition, subsequent major overhauls are usually required to reassemble 
the program to smooth out the patches. Major program changes are also 
required to adopt the program to equipment modifications, which occur with 
surprising frequency as the equipment manufacturers make further improve- 
ments. 
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These continuing program changes can create a heavy burden for the 
auditor to stay abreast with, if he is to review and check all significant 
changes in order to be satisfied with the operations performed by the pro- 
gram. 


To illustrate the number of major changes that occur to programming, 
I have had experience with a payroll program that was put in operation 
on an IBM 705 in June 1956. In the balance of the year 1956 and into 
1957 changes to the program were made to eliminate bugs brought to light 
during the processing. These changes were so numerous that in the latter 
part of 1957 it was necessary to reassemble the program in order to attain 
greater machine efficiency. In early 1958 the memory of the 705 was ex- 
panded from 20,000 to 40,000 characters, and the programming had to be 
revised again. In the summer of 1958 tape record coordinators were added 
to the system, and still another major change had to be made in the pro- 
gram. (And now IBM has announced the 7070!) 


I do not wish to imply that the program control technique is not useful 
to the auditor. As I stated previously, instances have been reported where 
auditors have successfully used this technique. However, care must be 
given as to when to attempt to establish a control copy of the program. 
It would be well for the auditor to wait until the many changes occurring 
in the initial years of an application have subsided before obtaining a copy 
of the program and establishing it as a control copy by review and check. 


TEST CASES 


Another technique for checking the programming and the operation of 
the EDP system is the use of test cases, This technique does not differ in 
substance from that used in many tabulating card installations by both 
the operators and auditors. In such installations it is common to run cer- 
tain test data through a machine operation in order to determine by com- 
parison with the predetermined output that the equipment is working 
properly and as programmed. 


In electronic computer operations similar test data is used by the 
programmers for debugging programs being developed. 


The auditor may also use this technique to check the operation of the 
program and the system. In fact, the test data prepared by the program- 
mers for their purposes may very well be retained by the auditors and 
modified to suit their purposes. The test data used by the auditor should 
deliberately include data which will violate controls programmed into the 
EDP system. For example, if the system has been programmed to print as 
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an exception any payroll item in excess of, say, $200 the auditor should 
include test data which will result in a payroll item in excess of $200, in 
order to determine whether it will be reported as an exception. 


The most effective use of this technique by the auditor is on a surprise 
basis. That is, when the actual operation which the auditor wishes to check 
is being processed. The auditor should request that the operating program 
be left in the computer at the completion of the processing so that he may 
process his test data with it. 


The technique of test cases is usually not affected by changes in the 
program, as are the program control techniques. This is because most of 
the program changes eccurring are to correct errors in the program or to 
permit more efficient operation. The form of the input is usually not altered. 
Therefore, the format of the test cases need not be changed. 


ELECTRONIC AUDIT PROGRAMS 


The second type of audit technique made possible by EDP is the use 
of the equipment to test the records produced by the system, rather than to 
test the system as just discussed. The approach of testing records is, of 
course, the historic approach of auditors. It has the advantage of permitting 
the auditor to test the results of many periods’ operations at one time. In 
contrast, the tests of the system’s operation previously mentioned require 
the presence of the auditor during each period or cycle to be tested. Also, as 
might be expected, tests of operations performed in the absence of the 
auditor are more revealing of the normal conditions than are tests of 
operations executed in the presence of the auditor. 


Using the equipment to test the records requires an instruction program 
to be prepared for the specific purposes of the auditor. This program may 
be utilized in either of two ways. It may be a program separate from the 
operating programs; or it may be incorporated in the operating program 
as a loop, which can be brought into operation by means of an alteration 
switch. 


Of the two methods, the separate program is preferable. It gives the 
auditor greater flexibility as to when he will use his program, that is, he 
need not carry out his audit when the operating program is being processed, 
nor need he confine it only to data being processed at that time. Also, it 
permits the auditor to retain the program under his own control. Thus, he 
can withhold from the EDP personnel specific knowledge of the program's 
operation and not allow them any opportunity to alter the program. 











organizations with a large volume of transactions. 
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The advantage of incorporating the audit program in the operating pro- 
gram is that it then does not require an additional computer run to use the 
program. This may be very significant on fully loaded EDP systems. 


The technique of including in an operation program a loop of instruc- 
tions for the auditor’s use is a valuable device where management has 
adopted the “management by exception” concept and has provided a visible 
record only for the information it requires for management purposes. By 
engaging this extra loop of instructions the auditor, for the period he wishes, 
may obtain a printout of additional information required for audit purposes. 


Electronic audit programs can perform four functions for the auditor : 


a 


They can check the details and total the information stored on tape or 
internal storage. For example, if inventory data is stored on tape 
or in internal storage, the individual price extensions can be checked 
and a total accumulated by an electronic audit program. 


The electronic audit program can select items for further testing by 
the auditor and supply the specific information needed for such 
testing. The selection can be made of the the unusual items, that is, 
items outside the standard of reasonableness established by the 
auditor (for example, accounts receivable unpaid for more than 90 
days), or the program can select items for testing on the basis of 
some statistical sampling technique, such as random numbers or 
systematic selection. 


Electronic audit programs can be used to analyze the details in a 
form which the auditor can use to interpret their significance. For 
example, a program can compare two payrolls. The difference be- 
tween the two payrolls can be analyzed to determine how much of 
the difference is due to more employees and how much of it is due 
to overtime hours or higher rates. 


Electronic audit programs can be used to perform mechanical func- 
tions, such as preparing confirmation requests or comparing inven- 


tory counts with recorded balances. 


BENEFIT OF ELECTRONIC AUDIT PROGRAMS 


If you consider these four ways in which electronic audit programs may 
aid the auditor, you can see why I believe that EDP gives the auditor an 
unprecedented opportunity to perform effective.and penetrating audits of 
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1. The audits can be much more extensive in that the auditor will be 
able, through the eyes of the EDP equipment, to look at many more 
transactions. 


tN 


The use of extended audit procedures will be more selective in that 
the auditor can quickly eliminate the normal items and confine his 
checking to items selected by his program as having the highest 
probability of error. 

Finally, audits will benefit from the greater use of the knowledge 
and experience of senior audit personnel. This experience can be 
incorporated in an electronic audit program which will rigidly apply 
it to every item examined. This has much the same effect as replac- 
ing junior persennel with senior. A related and realistic benefit is 
that senior audit personnel will have more time to make the neces- 
sary decisions, because the EDP equipment will reduce their super- 
visory burden and the amount of normal and correct items to be 
reviewed. 


AN ELECTRONIC PAYROLL AUDIT 


To illustrate one of the many types of electronic audit programs that 
are possible, I would like to mention a program we have used on one of 
our examinations as part of our audit of payroll expenses. 


The client has a 25,000-man payroll which is paid weekly in cash. 
The employees are paid on hourly rates. A master file for each employee 
is stored on magnetic tape, identifying the employee and giving his num- 
ber, position, title, rate of pay, number of exemptions, and the accumula- 
tive salary and withholding information for the year to date. The only 
other information required to compute the pay is the number of hours 
worked, which is supplied to the payroll computation from the weekly time 
card, 


We obtained a tape copy of the master file tapes during our examina- 
tion in the previous year and retained these tapes in our possession. During 
our current interim examination we obtained a tape copy of the current 
master file tapes. These two master files, together with a tabulating card 
file of position titles and minimum and maximum rates of pay per the union 
contract, became the input data for our audit program. 


The program itself was planned and flow charted by the auditors. It 
was coded by a programmer in the company’s EDP unit. An experienced 
electronic specialist from our Management Advisory Service Department 
reviewed the coding and participated, with the company programmer and 
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the auditors, in the debugging and testing of the program. Altogether, the 
development of the program took less than 300 man hours and two hours 
of computer time. 


The program checked the following for the six-month period elapsed 
between the two master files: 
1. All terminations during the period were identified. These were em- 
ployees appearing on the prior master file but not on the current. 
2. All hires during the period were identified. These represented em- 
ployees on the current master file but not on the prior 


3. The rates of pay in the two master files were compared and any 
changes other than the standard increases provided for by the 
union contract were printed out for investigation. 

4. Each employee was checked to determine whether his current rate 
of pay was within the minimum and maximum for his position as 
specified in the union contract. 


wn 


The social security tax withheld in the current year was checked 
by computation, as was the federal income tax withheld, for each 
employee. 


In an off-line operation on EAM (Electric Accounting Machine) equip- 
ment we compared tabulating cards produced by the electronic audit pro- 
gram for hires and terminations with tabulating cards used by the personnel 
department to record new hires and terminations. 


As a result of the operation of the electronic audit program, we were 
satisfied that : 
1. All new hires during the six-month period were authorized by 
personnel department. 


2. That all employees terminated were removed from the payroll. 
3. That each of the 25,000 employees was being paid within the union 
scale and that each received only the authorized wage increases 


4. That the deductions for social security and federal income tax were 
properly made. 


We consider this program only a starting point and are presently con- 
sidering a number of extensions to it, including checking of the total year 
to date pay for each employee and proving the total year to date pay for 
all employees with the total payrolls for the same period. 


However, even the auditing performed by the current electronic pro- 
gram was much more than has ever been practicable in the past. We estimate 
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that to carry out such a test manually would have taken us 5,000 man hours. 
Instead, by using EDP equipment, we were able to carry out this work 
in about 50 man hours and two hours of computer time. 


It may be rightfully said that the audit program went beyond the 
standards of auditing now generally accepted. I readily agree with this. 
However, the point I wish to make is that with a reduced amount of man 
hours we were able to extend the scope of our examination to an extent 
previously considered impracticable. This is why I believe that EDP 
offers great new possibilities to the auditor. 


AN ELECTRONIC ACCOUNT RECEIVABLE PROGRAM 


As another illustration of how an electronic audit program may be 
used by an auditor, I would like to tell you briefly of an electronic audit 
program that we are developing to audit the accounts receivable and revenue 
accounting of a public utility client. 


As you can imagine, public utilities have tremendous numbers of small 
accounts, none of which individually are significant in amount. This utility’s 
customers number in the millions. 


The program we are developing will make use of the customer master 
file information (which is similar to the payroll master file information 
previously mentioned) and the current list of open accounts receivable, 
both of which are stored on magnetic tape. By passing these tapes through 
the computer with our program we expect to check at least the following 
items : 


1. That the individual accounts receivable balance with the control 
total. 


2. That the individual customers’ deposits balance with the control total. 


3. That all of the company meters are either being billed currently or 
are recorded as turned off. 

4. That the company’s credit and collection procedures are being fol- 
lowed. 

The program will also select a number of items of the following types 

for audit follow-up : 

1. Accounts with unusual consumption patterns 

2. Accounts with old outstanding balances 

Accounts with credit balances 


3 
4. Accounts not billed during the current billing cycle 
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In addition, the program will prepare confirmation requests on accounts 
selected by a statistical sampling method. 


This audit program should give us a degree of assurance about the 
individual customer accounts which we were not previously able to establish. 
In addition, it should save us many man hours of checking details. While 
I cannot at this time guess at the saving in hours, I believe it will ‘be 
considerable. One example of the manual effort we expect to save is in 
the preparation of confirmation requests. Previously, it was necessary first 
to establish that the tabulating card file of accounts receivable was in bal- 
ance with the control totals before preparing confirmation requests. Those 
of you who have worked with tabulating cards can appreciate the problems 
involved in this with cards being out of file for various processing purposes. 
After the balance had been established, it was necessary to check manually 
that the information on the confirmation request agreed with the details on 
the account receivable cards. Now both of these operations will be done 
completely by the computer in a matter of minutes. 


SPECIAL AUDIT TECHNIQUES 


In addition to the electronic data processing audit techniques I have 
just cited are other special audit techniques adaptable to the audit of EDP 
systems by manual means. Unfortunately time does not permit anything 
beyond mere mention of a few, such as: 

1. Using proof totals prepared to guard against loss of data during 


processing for making over-all audit tests and comparison with con- 
trol totals. 


2. Reviewing the console typewriter printout and investigating unusual 
messages. 
3. Using the printouts of processing exceptions for selecting unusual 


items for testing. 


TRAINING THE AUDITOR FOR EDP 


The use of these techniques, as well as the previously mentioned tech- 
niques of using the equipment to test itself, requires considerable know] 
edge on the auditor’s part of the system and the equipment. No discussion 
of this subject would be complete without mention of how the auditor can 
acquire this knowledge. There are three basic steps to follow: 

1. Attend a seminar given by the computer manufacturer, preferably 

of two weeks’ duration. Learn what each of the machine components 
of an EDP system does, how they are directed, and what controls 
are built in the system. It is not necessary to learn to operate the 
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equipment or to program, but it is important to know how a com- 

puter operator may affect the processing; and also to understand 

computer logic necessary for developing programs. If you are inter- 

ested in developing an electronic audit program, it is well to become 

acquainted with the bottlenecks in an EDP system so that these 
¢ can be avoided in order to attain an efficient program. 


2. The auditor should participate in the development of the EDP appli- 
cation. Not only will this give the auditor an opportunity to dis- 
charge this responsibility for seeing that adequate controls are pro- 
grammed into the system, but it will also allow him to learn what 
processing is being done ; the form of input and output data ; the con- 
tent and format‘of internal and magnetic tape storage ; and the areas 
where adequate controls cannot be provided in the system. If the 
EDP application is already in operation, and the key internal auditing 
personnel have not participated in its development, I suggest that 
as a minimum they should study the logic flow charts and the con- 
tent and format of internal and external records. If possible, the 
audit personnel should assist in the computer room for a few operat- 
ing cycles. 


Ww 


The auditor should stay abreast of current publications on the sub- 
ject and at every opportunity be quick to share experiences with 
others interested in auditing of electronic data processing. 


CONCLUSION 


It is because of this need to share our experiences in auditing of elec- 
tronic data processing that I am grateful for this opportunity to come 
before such an outstanding group of internal auditors. As I said earlier, 
the extent of the current discussions of EDP and auditing is proof in itself 
that the issue is one which needs the consideration of all auditors. Cer- 
tainly the internal auditor with a much greater familiarity with the data 
processing methods of his organization is in a position to make a positive 
contribution to the advancement of auditing in this field. It is to you that 
I look for a substantial breakthrough in the use of EDP to aid the auditor. 
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PROBLEM AND SIGNIFICANCE 


| arly auditors will agree that their service is of little value if 
it does not meet the needs of management. How can audit reporting 
best serve the needs of management within an organization that has a 
number of widely dispersed branches performing similar operations? Should 
individual reports be submitted on each branch, should consolidated reports 
be issued, or are both types of reports desirable? 


To solve the problem of how best to report to top management on the 
operating efficiency of many subdivisions such as production plants, dis- 
tribution centers, retail units, internal auditors may consider one of two 
approaches. First, the internal auditor may review all phases of an activity 
at one location and then move on to another location, rendering a report 
on the entire operation at each site. Management may make comparisons 
based on these periodic reports and take whatever action is considered 
necessary. Alternatively, on each audit certain phases, such as receiving 
procedures, merchandise accountability and cash controls, may be subjected 
to a uniform examination at each plant. Individual reports may be issued 
on each plant, store, or comparable unit for the benefit of management at 
both the local level and the regional or comparable higher level. Addi- 
tionally, certain findings on several or all units may be summarized into 
a consolidated report for home office management. 


The Air Force has tackled this problem of reporting internal audit 
findings for more than 200 Air Force bases scattered throughout the United 
States and many foreign countries. In terms of dollars this arm of our 
defense is undoubtedly the largest single organization or agency in the 
United States, as the vast expenditures account for roughly one-fourth of 
the Federal budget; thus the Air Force is fertile ground for the type of 
service provided by internal audit. 


Last year about 14,500 internal audit reports were issued by the 200- 
plus Air Force audit offices, which have been established to provide audit 
service to Air Force installation commanders. However, this multiplicity 
of reports did not resolve the problem of presénting precise information 
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in the most usable form for the benefit of top command. To solve the prob- 
lem of reporting to management at the local level and also reporting on a 
timely basis to intermediate and top management levels, the Auditor Gen- 
eral has adopted a program of directed audits.* Each directed audit is 
accomplished by use of a single audit program covering selected phases 
of a single function. Auditor General personnel at all installations perform 
ing such functions make the audit within the same time period and issue audit 
reports setting forth their findings at their respective installations. Sum- 
mary audit reports result from the consolidation and analysis at a central 
point of audit findings submitted for possible summary. These summary 
reports, through providing top management with significant information, 
represent the biggest step forward in Air Force internal audit within the 
last two years. 


ORGANIZATIONAL BACKGROUND 


The abbreviated chart below indicates Air Force structure and channels 
of authority. Major air commands are designated functionally in accord- 
ance with their missions, such as defense of the continental U. S., strategic 
bombing, procurement and supply of materials. Under each command are 
several subordinate commands, both support and combat, located at various 
Air Force bases, depots, and other Air Force installations in continental 
United States and overseas. 

















| Headquarters USAF | (Responsible for policy) 
-.- so 
, Major Air Command (Responsible for operations) 
Intermediate Echelon | (Such as numbered Air Force 
ee = or Air Materiel Area) 
Air Force Base _ (Typically the home of a Wing 
(or comparable Houses and supports units at 
installation ) | all levels of command) 





* The internal audit program in which directed audit is employed should not be con- 
fused with the contract audit program which relates to the audit of government 
contracts at industrial plants. Nor should anyone draw the hasty conclusion that all 

internal audit is “directed.” On the contrary, individual reports are still the main 

product supplied to our customers, Air Force commanders and operating personnel. 
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DIRECTED AUDIT PROGRAMS 


OBJECTIVES 


One of the advantages of directed audits is that they provide a means 
for furnishing Headquarters U. S. Air Force and management at the major 
air command (operating) level with an appraisal of certain phases of 
operations at the various Air Force installations under their respectiv 
commands, For instance the commander of Strategic Air Command would 
be informed through the medium of a summary report if there were excess 
supplies at his installations. As a usual practice reasons why excesses 
have accumulated and recommendations for correction will also be included 
in the report. 


The function of directed audit is to channel the necessary audit effort 
of each field office into those phases of an activity which have command 
wide importance. The direction the audit effort should take is determined 
from past experience and suggestions from both audit and operating per- 
sonnel, Thus, an intensive examination of certain segments of the activity 
is accomplished on a uniform basis. 





The guide for performing the necessary examination to fulfill the 
objectives is the directed audit program. Each is a one time program rather 
than a permanent guide to be used on successive audits and must be pre 
pared or revised each time a directed audit is scheduled. 


The resident auditor at each installation submits individual audit reports 
to the base commander. Although the type of information submitted for 
summarization must be uniform, the auditor is privileged to exercise initia 
tive in probing further and including all findings in individual reports 
These individual reports are also sent to higher echelons to provide the 
major air command with detailed information which may be used in con 
junction with the summary reports. Thus working relations between ‘base 
commander and the major air command are enhanced through keeping both 
informed. 


SCHEDULING DIRECTED AUDITS 


The first step in establishing an over-all program is the determina- 
tion of which audits are to be directed and how much time is to be devoted 
to the audit of each of the activities included. The over-all program is 
developed at the Auditor General's office at Headquarters USAF. Sched- 
ule 1 illustrates the format of a working program. As will be noted, this 
schedule prescribes what activities are included, under the directed pro- 
gram, the district (see next paragraph) responsible for preparation, audit 
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hours programmed, and dates indicating when various phases of the work 
are to be accomplished from the starting date to the date the summary 
report is to be distributed. Upon receipt of this information each resident 
auditor prepares a current schedule for his office to include time to be 
devoted to directed audits and to special requests and that available for 
use in accordance with local needs. 


RESPONSIBILITY FOR DEVELOPMENT OF AUDIT PROGRAMS 


To perform audits at the various installations and to render timely 
management assistance, Auditor General personnel are physically located 
in the field at or near the site of audit. Six district headquarters offices 
have been established to exercise supervision over the audit offices located 
at Air Force installations within their respective geographical areas. How 
ever, all Auditor General personnel are assigned to Headquarters USAF 
in Washington and are therefore independent of local commands. Directed 
audit programs are prepared under the supervision of five of the six district 
headquarters, certain programs being assigned to each.* The district appoints 
a project officer, either a military or a civilian supervisory auditor, to pre- 
pare the program. A project officer for each programmed directed audit 
is appointed at Headquarters Auditor General to maintain liaison between 
the district and headquarters. 


INITIAL PROGRESS REPORT 

A program is developed over a period of approximately six months 
(see Schedule 1). The initial progress report is the first required submis 
sion to the Auditor General headquarters in Washington. This initial prog- 
ress report will include results of preliminary study and analysis to deter 
mine the phases that should be incorporated into the audit program to be 
developed. In making this preliminary study, the project officer will 
normally take into consideration such matters as: 

1. The system to be audited: Both public accountants and internal 
auditors of commercial enterprises recognize that both the business 
and the system must be understood as a prerequisite to the prepara 
tion of an audit program. 


2. Known areas of weakness or sensitivity based upon previous audit 
reports, surveys of controls, or other information included in the 
files. 

3. Requests and comments received from operating, as distinct from 
auditing, personnel. These may include specific problems that operat 

* Since submission of this article, the Auditor General has established three program 

centers to develop audit programs and prepare summary reports of audit. 
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ing personnel believe to be important. Frequently such requests are 
made by headquarters personnel who desire information concerning 
field operations. 

4. Significance and potential value of possible findings to manage- 
ment. 


wn 


Feasibility of summarization. The project officer must always con- 
sider the possibility of summarizing results of audit in quantitative 
terms. Where practical, audit results should be capable of being 
summarized quantitatively; but if the nature of the audit inquiry 
does not permit expression of the audit results in quantitative terms, 
this fact must be recognized early in the process of preparing the 
audit program. 


PRELIMINARY PROGRAM OUTLINE 


The preliminary program outline is submitted along with the initial 
progress report. It is usually prepared at a selected Air Force base by the 
district project officer and should contain the following : 

1. A statement of the audit objective for each section or subsection. 

It is necessary that these objectives be stated clearly and realis- 
tically to guide both the development and the use of the program. 


to 


A brief statement of how the audit for each section or subsection 

is to be accomplished, including : 

a. Internal controls to be reviewed. 

b. Basic records to be examined. 

c. Documents or transactions to be tested. 

d. Identification and size of sample. If statistical (objective) sample 
techniques are to be employed, the project officer should provide 
data on size of universe, range of error, and representativeness 
of the sample. 


PREPARATION OF PROGRAM 


\fter coordination and approval of the preliminary outline by the Head- 
quarters project officer comes the detailed process of developing the pro- 
gram. Since these programs will be used by as many as 200 audit offices 
as a basis not only for individual reports but also for summarization of 
pertinent information, extreme care in preparation is essential. Steps in 
the preparation are: 


1. The district project officer develops a draft. This on-the-job phase 
is usually performed at an audit office with the assistance of the local 
audit staff. At all times objectives and guidelines supplied to the 
districts by the Auditor General must be given careful considera- 
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tion. These guidelines contain both instructions and factors to be 
considered in the development of directed audit programs. Some 
of these factors and instructions relate to such matters as: Avoid- 
ance of ambiguity in questions, possible significance of audit infor- 
mation, use of percentages, conversion to narrative-type statements, 
pro-forma workpapers, follow-on information, determination of 
causes, and others. 


2. Upon completion of the initial draft each program is tested at a 
selected Air Force base within the district to which the project 
officer is assigned. This test is intended to identify, correct, or elimi 
nate defective audit steps and to provide a reasonable estimate of 
the time required to perform the audit. The program is revised by 
the district project officer in light of test results. 

3. The district project officer will visit the Auditor General head 
quarters for final review and critique of the program with both the 
headquarters project officer and the Assistant Auditor General for 
Internal Audits. Necessary revisions are then made. 

4. The Auditor General or his deputy will be personally briefed. This 
briefing is an important device for keeping the audit agency's top 
management informed of the agency’s work as well as for modify 
ing the program in light of suggestions made. 

ILLUSTRATION 

The sections of the first directed program used in auditing the purchasing 

and contracting activity (now known as base procurement)* were: 

1. Selection of the sample 


Use of directed working papers 
Purchase request 

Selection of sources 

Formal advertising 

Negotiation 

Contract preparation 

Discounts 

Warranties 
Government-furnished property 
Deliveries 

Ratification of unauthorized acts 


* Base procurement offices are authorized to contract for supplies and services that 
are obtained from funds allotted to individual bases as distinguished from centrally 
procured items obtained and distributed on an Air Force-wide basis 
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13. Summary of base procurement 
14. Adequacy of the contract file 


To illustrate the detailed steps, Section 11, which relates to deliveries, 
is reproduced in its entirety. Internal auditors are aware that in contract- 
ing for manufactured products delivery is important, as lack of supplies, 
parts, or services ordered by contract may result in substantial losses or, 
as in the Air Force, inability to accomplish the mission satisfactorily. The 
following reproduced section illustrates background information given, the 
questions or steps to be summarized, and the provision for recommenda 
tion submitted at the local installation. 


11. Deliveries. Among the factors which will pin-point the effectiveness of con- 
tract award and administration is the timeliness of scheduled deliveries by 
the contractor. In nearly every procurement some of the vendors solicited do 
not offer a bid because they cannot comply with the delivery dates specified 
in the invitation for bid or request for proposal. If vendors who do submit bids 
are awarded the contract based upon their ability to furnish the material or 
service within the time specified in the invitation to bid or request for pro 
posal and the contracting officer does not enforce the delivery provisions of 
the contract, the interests of the Air Force are not being properly protected. 
Failure on the part of the contractor to meet specified delivery dates is just 
cause for termination of the contract by default. 

a. By summarizing the “yes” and “no” answers to questions on Attachments 
3 and 4*, provide the following data: 
(1) On how many of the contracts is it indicated that the con- 
tractor was delinquent in his deliveries? ( ) 
(2) Of (1) above, on how many of the delinquent contracts were 
one or more follow-up letters written to the contractor indi- 
cating that he should show cause as to why the delivery 
schedule was not met or suffer termination of the contract 
for default? ( ) 

(3) On how many of the replies to the follow-up letters indicated 
in (2) above did the contractor fail to justify his delay by a 
fact or condition that was unforeseeable at the time that the 
contract was awarded? (Strikes, weather, transportation diffi- 
culties, or the like.) ( ) 
(a) Discuss unjustified excuses for delayed delivery below: 

(4) On how many of the contracts was no formal action taken 
by the local purchase office to determine the reason for the 
delinquency ? ( ) 
(a) Give reasons, if any, below why contracting officer failed to 

enforce delivery provisons : 

(5) On how many of the contracts involved in (1) above was the 
contractor no later than 30 days delinquent in any of the 
scheduled deliveries ? ( ) 


* Attachments not illustrated. These are types of workpapers which permit summary 
of details by positive or negative statements. 
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(6) On how many of the contracts involved in (1) above was 
the contractor over 30 days delinquent in any of the deliveries 
under the contract? ( ) 


(7) On how many of the follow-up letters was no reply received 
from the contractor? ( ) 


(8) How many of the contracts were terminated for default be- 
cause the contractor was unable to meet required delivery 
schedules ? ( ) 
(a) Give examples below : 
b. Recommendations. Indicate below the specific actions recommended to cor- 
rect any significant deficiencies disclosed during the examination of de- 
liveries. 


AUDIT REPORTS 


Upon completion of the directed phases of the audit and the additional 
steps considered necessary at the local base, each resident auditor will 
prepare a report for submission to the major air commander through the 
base commander. This report will include not only findings discovered 
while performing the directed audit but also additional findings discovered 
while performing additional audit steps added at the local audit office 
upon the initiative of the auditor. The report is reviewed by the resident 
auditor with the responsible local commander and members of his staff 
before being forwarded to intermediate and major air commanders. Such 
discussions provide an excellent means for the auditor to convey to the 
commander the results of audit in a more effective manner than if written 
reports were used exclusively. 


Copies of the uniform working papers containing the results of the 
directed audit are forwarded by each field office to the responsible Auditor 
General district headquarters for summarization and preparation of the 
summary report. The summary report identifies the significant areas which, 
because of materiality or frequency of occurrence, should be reported to 
the major air commanders and to Headquarters USAF. Upon review and 
approval by the Auditor General or his deputy the reports are published 
and distributed to the commands and to appropriate staff personnel at 
Headquarters USAF. Additionally, copies of these reports are sent to 
Auditor General liaison officers at each major air command for discussion 
of audit findings and recommendations with the commander and appropriate 
members of his staff. To provide the reader with a clearer idea of what is 
included, excerpts from the summary report on the purchasing and con- 
tracting function are given. Author’s explanation of omissions is entered 
in parentheses. 
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DEPARTMENT OF THE AIR FORCE 
Headquarters United States Air Force 
Washington 25, D. C. 


REPLY TO 
attn OF: AFAUD (DATE) 
suBjecT: Summary Report of Audit 


TO: 





Local Purchasing and Contracting Activities 


. AAC ARDC MATS TAC 
ADC ATC PACAF USAFE 
AMC CONAC SAC 


( Commander ) 





1. A uniform examination of - - contracts was made during the month 
of April 1958 in the local procurement offices at 215 Air Force installa- 
tions. Each contract examined involved a procurement action of $1,000 
or more. Our objective was to ascertain whether the local application 
of procuremeht policies and procedures afforded maximum protection 
of the interests of the Air Force and the procurement of materials, 
services, and supplies at the lowest price consistent with the quality 
and delivery schedules required. Audit emphasis was placed on ade- 
quacy of policies and procedures and the degree of compliance with 
pertinent directives, not on detection of number of deficiencies. During 
the twelve-month period ended 28 February 1958, the 215 local procure- 
ment offices effected a total of approximately ———— procurement actions, 
representing a value of approximately ———. 


tr 


Resident auditors examined procedures relating to the preparation of 
requests of local purchase by base activities, the selection of sources 
and degree of competition involved in the award of the contract, ade- 
quacy of specifications or item descriptions in the invitations for bids 
or requests for proposals, adequacy of contract preparation, control 
of government-furnished property and equipment, enforcement of war- 
ranty provisons and delivery schedules, and the effectiveness of con- 
tract administration. 

3. Significant areas of deficiency are summarized as follows: 

a. Purchase requests prepared by base activities .. . (Tab A). This 
deficiency, prevalent in all major commands, had a snowballing 
effect in creating other deficiencies such as: 

(1) Invitations for bids (Comment 
on adequacy of time). 


The limited response (Comment 
upon effect on adequacy of competition). 

(3) In some instances the contracting officer resorted to unjustified 
sole-source procurement (Tab D). 


+ 


Invitations for bids (Comment 
on adequacy and completeness of requirements description). 


* Designation of command in order of abbreviations : 


Alaskan Air Command Air Research and Development Command 
Air Defense Command Air Training Command 

Air Materiel Command Continental Air Command 

Military Air Transport Service Tactical Air Command 

Pacific Air Forces U. S. Armed Forces in Europe 


Strategic Air Command 
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(5) Hastily prepared contracts (Comment 
on failure to include provisions necessary). 
(6) Unrealistic delivery schedules established in contracts (Tab G). 
4. Coincidental with their examination of the selected program phases 


(Comment on oral orders to contractors by unauthorized 
personnel ). 


5. Based on findings and comments of the resident auditors, procurement 
regulations (Comment on areas wherein not specific 
enough ). 


6. Our summary conclusion is that over-all implementation of procure- 
ment policies and procedures 


(Name and signature) 
Auditor General 

REACTION TO DIRECTED AUDITS 
BENEFITS TO CLIENTS 


The response of our clients (Air Force commanders and other operat- 
ing personnel) has been very favorable. The Auditor General has received 
correspondence from commanders, verbal comments at conferences, reports 
from our liaison officers* and others indicating the assistance and benefits 
derived from these reports with requests for continuation of such efforts. 
After synthesization of the comments and correspondence, the following 
seem to be among the main benefits: 

1. Deficiencies included in the summary report are used as guides for 
areas to be discussed with base commanders through major air 
command visits to field installations. For instance, representatives 
could determine from the purchasing and contracting summary re- 
port that a follow-through on lead time would likely prove profitable. 


nt 


Individual reports issued by resident auditors at the air bases are 
reviewed with a more critical eye and more aggressive action on 
the part of base commanders is being taken since the advent of 
the summary report. Base commanders are aware that aggressive 
action and follow-up will be taken by major air commanders upon 
receipt of summary reports. 


w 


Closer cooperation and coordination between functional staff offices 
frequently results because summary audit reports enable these staffs 
to focus attention on significant areas. 
4. Tighter internal control over the areas reported, such as use of 
charts, boards and flagging of major deficiency areas, often results. 
5. Areas needing improvement may be pin-pointed so that instructions 
to the field indicating revised procedures or corrective action may 
be facilitated. 


* Resident auditors at major air commands also perform liaison duties. 
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BENEFITS TO AUDIT 


Directed audit programs and summary reports prepared from the direct- 
ed audit workpapers have been of great value to the Air Force audit 
agency. Among the benefits are: 


1. Better audits. The intensive study and extreme care exercised on 
the part of auditors assigned the responsibility for preparation of 
designated programs result in audit programs that are superior to 
those which otherwise would have been prepared by each of the 
200-plus audit offices. As each district project officer becomes a 
specialist, his audit program provides a greater breadth and depth 
of coverage on selected phases of the activity under audit. Cover- 
age of areas of weakness at certain installations revealed by prior 
audits or from other sources can be provided for Air Force-wide 
application. Furthermore, the entire program of directed audits 
makes easier a better balance between the various functions, such 
as finance, procurement and supply. 


2. Economy of effort. Each Air Force installation normally has from 
30 to 40 activities which must be audited annually. If each audit 
office were to prepare its own program for these activities, a substan- 
tial portion of the available staff time would be devoted to this pur- 
pose. Central preparation of the directed programs frees the audit 
staff from preparation of such programs, thereby providing a sub- 
stantial increase in man-hours available for audit. 


3. Better informed headquarters personnel. Headquarters personnel 
participate in the preparation of the programs, in the review of 
findings, and in the preparation of summary reports. We have found 
this process an excellent mechanism for keeping headquarters per- 
sonnel informed regarding problem areas. It also tends to eliminate 
the “ivory tower” attitude by keeping such personnel in close con- 
tact with the local offices and problems. The personal review by 
the Auditor General or his deputy of every summary report is an 
efficient device for helping them keep current on the work of their 
staffs as well as on the financial aspects of Air Force operating 
problems. 


SOME QUESTIONS AND ANSWERS 


The reader may raise the question as to whether or not use of the 
directed programs tends to downgrade the work of the auditor to a more 
routine or clerical level. Of course this must be prevented. We attempt to 
accomplish this in the following ways: 
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Each auditor is cautioned that the use of the directed program does 
not excuse him from the need for alertness in making the audit. 
He is expected to exercise initiative and judgment in expanding 
the scope of audit in accordance with local needs for possible inclu- 
sion of results in individual reports of audit. 


Each program includes certain questions requiring the use of pro- 
fessional judgment in the examination and in the evaluation of 
findings. The answers to these questions are matters of opinion 
rather than of quantity. 

Not all the auditor’s time is required for performing directed audits. 
A substantial part of the time is available to the audit office for 
use in performing audits at the discretion of the local resident 
auditor. 


CONCLUSION 


As stated in the beginning of this article, the test of the value of internal 
audit service is the degree to which it serves the needs of management. 
The experience of Air Force internal audit indicates that summary reports 
as a corollary or by-product of individual reports furnish a most effective 
advisory service to management. Comment from liaison officers, district 
directors, and other internal audit personnel bears out the fact that both 
audit programs and reports have improved as a result. Internal audit 
seems to have a greater impact on Air Force operations as a consequence 
of a more favorable response by commanders and a more concerted effort 
to effect timely improvements. 








































EFFECTIVE INTERNAL AUDIT 
REPORTS* 
By JOHN P. TRIMBLE 


Chief Accountant, Tennessee del Ecuador, S.A. 


T is said that one picture is worth a thousand words. I can describe 

one in thirty—so we can start out this discussion with a credit balance 
of 970. words. This is the picture: The audit is complete. The auditor sits 
at his desk, pencil poised, surrounded by stacks of working papers, and 
stares—and stares—and stares—at a blank sheet of paper. 


Report writing has begun at this moment. It will culminate when the 
harried auditor places his signature at the bottom of a neatly-typed report 
containing his findings, recommendations, and, between the lines, his sweat, 
blood, and tears. 


Report writing is not easy. Recently 1 heard a capable auditor remark, 
“I'd rather make two audits than write one report.” Most auditors have 
a reasonable feeling of confidence, even when they undertake a new audit 
assignment. Yet when they are confronted with the task of translating their 
findings into a clear-cut, interesting résumé of their audit endeavor, the 
same sense of certainty is not so apparent. 


At this point, let’s ask the question, “Is the report vital to the audit?” 
Since the written report is the end result and summation of all audit 
endeavor, it naturally becomes a measure of how well the job was done. 
In my opinion, therefore, it assumes a position of real significance. 


If we are agreed, then, that the report is an essential part of the audit 
and not just a “has-to-be-done” requirement, how then do we go about 
obtaining effective reports that will magnify the audit function and the 
auditor as well? 


A proven, time-tested approach to news writing is used by the jour- 
nalistic profession. It’s a formula developed to insure, at least in part, a 
uccessful news story. I’m sure you are all familiar with the method: In 
order for a news story to be judged effective, it must contain the answer 
to six questions in the first paragraph—who, what, when, where, why, 
and how. 1 am certain that this technique can be successfully adopted 
and direct application made to audit report writing. 


Consider these six points in their logical sequence. To begin with, 
“who” receives the report, or, to whom is it directed? If the auditor makes 


* Delivered at a Fort Worth Chapter meeting. 
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an effort to write a report that is intentionally designed to appeal to a 
specific reader, he is approaching his writing problem intelligently in the 
same way that the public speaker does who makes his audience feel as 
though they were being addressed as individuals. The auditor should make 
a concerted effort to anticipate his reader’s thoughts as the report is read. 
If the writer is able to become the reader as he creates, then, under this 
cloak of dual personality, Dr. Jekyll knows how Mr. Hyde will react to 
what he, Jekyll, has written; he is able to understand how Hyde will 
respond to a particular phrasing and he can possibly anticipate a question. 
Needless to say, there is no inference here that the Hydes of this world 
are the only ones to whom audit reports are directed. 


We listed “what” as the second question. “What,” then, are the basic 

ingredients of effective internal reports ? Material comes first, in my opinion. 

The auditor should ask himself, “Is it worth while to report this item; do 

I have all the necessary facts at hand?” Next, brevity and clarity must 

be accorded due consideration. Third, a sincere effort must be made to 

capture and hold the reader's attention, and, finally, the impact of the 

report on the reader must be considered—what will be his probable reac- 
tion to what he has read? 


The “when,” our third point in effective reporting, also requires proper 
evaluation. Let’s go back to our original word picture where the auditor 
sits, pencil poised, and stares at a blank sheet of paper. The auditor who 
finds himself in this position has neglected to consider the “when” of report 
writing. Having left all the writing to the last minute, he is somewhat over 
whelmed at the task confronting him. Writing the report in draft form 
as the work progresses is like money in the bank or an annuity for old 
age. Like the newspaper reporter, the auditor should write the story while 
it’s hot. He must get in the habit of not only making notes, but trying to 
expand these notes into a report draft. Most auditors have had the experi 
ence of returning to a cold set of working papers containing a few hastily 
scribbled notes that don’t even appear to be their own work. The familiarity 
with the subject, which could have remained fresh with current drafting, 
has become stale, and valuable time is wasted in checking back to be sure 
all the facts are straight. 





The fourth point pertinent to a good news story is “where.” Where, 
then, or at what level of the organization, should effective report writing 
be developed? It seems to me that the answer is “at the lowest level of 
the audit staff—with the juniors or trainees of the organization.” Report 
writing costs money; so it follows that the less editing and rewrite under- 
taken, the less money spent for the final report. All of the audit staff should 
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be aware of the advantages to be gained from effective writing, conse- 
quently the newer staff members should actively participate. Let them rough 
draft the story as the work progresses ; let them keep the story hot. Report 
writing should not be reserved exclusively for the senior staff members. 
There is much to be gained by developing writing talents through active 
participation. 


I want to interject a footnote here: I mentioned editing a minute ago 
be careful about this. The wrong editing approach can really discourage 
a potentially good writer. Edit for content, company policy, and obvious 
grammatical errors, but not for style, individual expression, or phraseology. 
All changes should be discussed with the writer; explain the problem and 
let the auditor writing the report make the rewrite. 


Now, number five—‘“why.” Why is the written report emphasized so 
much? Weren't the findings and recommendations orally discussed with 
everyone concerned? The written report is a matter of permanent record 
immediately available as a reference. | know we've all had experience with 
the complications that can arise from making specific quotations from oral 
discussions. The written report pinpoints the problem clearly for the busy 
executive who, through no fault of his own, may not have been able to give 
the auditor his undivided attention at the time of the oral discussion. If 
there was any misunderstanding resulting from the oral reporting, the 
carefully-worded written report will point a finger and the misunderstand- 
ing can be corrected. 


Finally, the sixth question: “How” do we go about trying to get effec- 
tive internal audit reports? I have a few suggestions that may prove help- 
ful. A moment ago, when we were discussing the second question con- 
cerning “what” are the basic ingredients of an effective report, we listed 
material, brevity and clarity, reader attention and interest, and lastly, reader 
impact. We should now pursue these features one by one to see “how” we 
may use them to obtain effective reporting. 


First, material. Is what is written worth the reader’s time? All too 
frequently reports contain material that never should have been included. 
It can even be termed petty. Inclusion of material of this nature in an effort 
to make a good showing can only have the undesired effect of suggesting 
that the auditor has little judgment and is trying to capitalize on another's 
honest mistake. This type of writing will surely result in destroying the 
effectiveness of the entire audit program. 


Material means an array of facts. Effective material means an array 
of all the facts. If the auditor has reached the conclusion that a recom- 
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mendation is necessary, findings must be presented—both pro and con— 
that lead to that conclusion. All the evidence must be given before a verdict 
is rendered. By giving all the facts, the auditor strengthens his position ; 
if a half-truth is told, it may jeopardize a legitimate finding. There is 
always someone ready and eager to tell the other half of the story. If a 
point is made with a half-truth, and it gets by uncontested, a disservice has 
been done to both auditing and management. There will always be an ac- 
counting for an incomplete assemblage of facts. Findings or recommenda- 
tions should be listed in the report in order of importance, particularly if 
the report is lengthy. Saving the best for last in this case may not be the 
wisest approach. If an important finding has a place of prominence toward 
the beginning of the report, it is entirely possible that it will make a greater 
impression than if it is inserted toward the end. 


The second “what” is clarity and brevity. Above all, clarity, and, if 
possible, brevity. In order to emphasize the importance of these two fac- 
tors, language professors teach their classes that neither the spoken nor 
the written word can guarantee absolute conveyance of thought between 
individuals. Natural language barriers resulting from shaded meanings, 
word definitions, and the multitudinous methods of phrasing make it im- 
possible for exact thoughts to be transmitted. Something is always lost in 
the translation from thought to word and back to thought again. In the 
exchange of ideas, the recipient always ends up with a plus or minus 
quantity—either he gets more of the idea than was intended or he gets 
less. In report writing we must strive to hold the fluctuations in plus and 
minus quantities to a minimum. 


In expressing any thought, a poor choice of words can nullify even 
clear thinking. One thought at a time should be introduced, directly and 
briefly stated in simple terms, and followed through to a logical conclusion 
The auditor must make a point of knowing that the phraseology he employs 
means the same thing to each reader. If several ideas are presented, they 
should be outlined at the beginning of the report in order to be more 
readily absorbed as they appear in the body of the report. Brevity and 
clarity complement each other; a 100-word writing of a finding which 
really needs only 50 words to tell results in neither brevity nor clarity. 
Conversely, neither does telling a 100-word story in 50 words. Just remem- 
ber, to be exact and concise in phraseology takes hard mental effort; we 
are all prone to use words that merely take up space. 


If the report is long by virtue of the number of findings involved, it 
should be broken up into related sections. The report may be made more 


effective by the use of summation techniques; it may need a summary of 
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each section, or it may need only a general summary at the end that will 
flag important conclusions or recommendations. The auditor should never 
use a word unless he is positive of its meaning; he should become word 
curious. All auditors should acquire at least a speaking acquaintance with 
a book of synonyms and a good dictionary. Pet expressions should be 
avoided, for if they are not, the report will become stereotyped and hack- 
neyed and will begin to sound like a form letter and be treated as such. 


The third point we called “reader attention.” We are concerned here 
with the “how” to secure reader attention and to hold interest throughout 
the length of the report. Here’s where all the stops can be pulled and all 
the tricks of the trade applied. If the reader is impressed with the report 
after reading it, favorable action is likely to result. By the use of proved at- 
tention-getting devices, a reader’s interest can be captured and held so 
subtly that he may never be aware that he has heen charmed into the 
writer’s camp. 


A headline will get more attention than a paragraph subject. If the 
finding concerns Accounts Receivable at a branch office in Chicago where 
there has been a breakdown in the follow-up procedure, a heading such 
as “Collections Off at Chicago Branch” will fire the imagination infinitely 
more than a paragraph styled, simply, “Accounts Receivable—Chicago.” 
The psychological reaction headline technique may be incorporated in sub- 
headings as well; it may re-enlist the interest of a mental wanderer. The 
auditor should take every opportunity to play on the reader’s emotions, to 
deliberately stimulate curiosity, sympathy, humor, anxiety, or pleasure. 


If the auditor can deliver a telling blow for attention in the first para- 
graph of his report, winning the rest of the rounds will be easier. The 
first paragraph should be loaded with banner headlines which will serve 
to whet the reader’s curiosity, but tell him only enough of the story to 
arouse his interest—then he is compelled to continue. 


In the main body of the report, it is necessary that there be a logical 
progression to the conclusion. Each finding and recommendation should 
be completed separately so that the story will move easily from one point 
to another in the same order outlined in the opening paragraph of the 
report. 


Consideration should be given to “eye appeal” by breaking the story 
into short paragraphs. This permits the reader to rest his eyes and also 
gives him a mental breather; he remains attentive because he can relax 
between paragraphs before tackling another point. 
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Everyone pays attention to a compliment. No cloak wears as snug or 
as warm as well-deserved praise, so the considerate auditor searches for 
an opportunity to be complimentary in a sincere manner, avoiding obvious 
platitudes or cliches. Their use results in monotony—and when that feel- 
ing prevails, the report is doomed to a wearisome, dogmatic perusal. 


Schedules and attachments are frequently employed as attention-getting 
devices, but the use of attached schedules or any other figure presentation 
should be approached with caution. Such schedules should be stripped to 
the bare necessities that will make the point. All figure presentation should 
be interpreted in simple and direct language. 


Packaging sells commodities, so it follows that an ingenious wrapping 
may help to sell a report. The auditor should consider using an attractive 
cover or binder and make the report a ready reference by arranging it 
into sections through the use of divider sheets and tabs. 


Finally, we need to consider “how” to attain the desired reader impact. 
What effect will the report have on the reader? When the auditor first 
begins the story, he is hoping to attain a specific reaction to the report. 
Perhaps there is more than one reaction desired. At any rate, unless his 
writing can produce the results he wants somewhere along the line, he has 
miscalculated. To get a favorable reaction, auditors must employ tact and 
finesse in making an effort to create the proper atmosphere. An open-and- 
above-board, fair-minded approach to a controversial finding should, at 
least, open the door for a meeting of the minds. If the finding at hand is 
controversial, the writer is presented with a real challenge in trying to antici- 
pate reader reaction as he writes. Only through a feeling of what probable 
reader reaction will be can the auditor lead the argument toward the desired 
end. When there is need to write up a particularly controversial finding, the 
auditor might try to secure a tape recorder and record the story. The report 
‘an then be played back so that the writer, as a listener, can become the indi- 
vidual to whom the report is directed. This may help to evaluate the effort at 
tactfulness and finesse and should give an impression of what the reader 
impact will be. 


I believe that this ability to feel out the reader can be acquired through 
hard work and writing experience. Advertising men work diligently at 
developing the technique because it pays off in dollars for them. We can 
well afford a concerted effort toward the use of finesse and tact in our 
reports since, in the final analysis, it could mean dollars to us also by 
way of added compensation. We have all heard, or perhaps even been, 
the unhappy auditor who bitterly complains, “Why don’t they accept this 
report in the spirit in which it was written? Why do they have to pick it 
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to pieces?” There is no doubt about what happened. In the mad rush to 
make his point, the writer drove headlong to disaster employing neither 
tact nor finesse in his recital, so the reaction he created was exactly the 
opposite of his intention. The pity is that he does not realize the mistake 
he made because he pleads for understanding rather than admitting that 
the fault might be his own—or that if he had employed another stratagem 
he might have made his point successfully. 


In conclusion, I think we have to realize that there is no quick solution 
to the problem of effective report writing. There is no panacea or witches’ 
brew or magic formula to help us except possibly a mixture of the old 
sweat, blood, and tears. We can pick up tips on writing techniques and 
fundamentals, such as tle who, what, when, where, why and how that we 
have been discussing, but in the final analysis the best in report writing 
will always require hard work, continuing emphasis, and thought. 


Cicero sums it up for us in a Latin proverb: “What is true, simple, 
and sincere is most congenial to man’s nature.” 




















A CLARIFICATION OF THE BROADENED 
ROLE OF INTERNAL AUDITING 
By MURRAY KANE 


Comptroller, Chrysler Corp., Airtemp Division, Dayton Plant 


PURPOSE 


HE purpose of this paper is to highlight those characteristics of the 

internal auditing function which clearly distinguish it from other serv- 
ices to management. With internal auditors in many companies embarking 
on programs to broaden their scope, this is a good time for internal audi- 
tors and their managements to consider these characteristics so that the 
role of internal auditing can be viewed from a common ground. It is 
hoped that this view will help to accelerate and further the broadened role 
of internal auditing. 


BACKGROUND 

Many texts and articles have described in detail the historical develop- 
ment of the internal auditing function. As we know, this development 
ranges from the detailed checking of accounting entries to broad-scope 
audits of policies, procedures and controls in both the financial and operat- 
ing ends of today’s modern business enterprises. I would like to review 
briefly this development from World War II to the present, and especially 
the important direction and impetus given to it by THe INSTITUTE oF 
[INTERNAL AupiTors, the professional society of those engaged in internal 
auditing activities. 


Let us recall the phenomenal growth and divisionalization of business 
and government during and immediately after World War II. This created 
complex control problems for management. Headquarters management, 
because of a wider range of responsibility, exercised less direct supervision 
over line or operating management. More and larger branches and plants 
had to be guided and controlled by the home office. Most managements 
faced this problem by establishing specialized control techniques for the 
various functions of the business. For the most part, this was and is done 
today through specialized staff activities, each responsible for guiding and 
controlling a particular function: Sales, Purchasing, Production Control, 
Finance, Manufacturing, Engineering, Personnel, etc. These specialized 
staff activities exercise control by establishing policies, procedures and 
reporting requirements which must be either complied with or used as 
guides by the various units of the organization. 


During this period, the initial growth of internal auditing was general- 
ly in the financial end of business enterprises. More locations meant more 
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auditing. More accounting procedures meant more audits of compliance. 
This is not to say that many auditors were not even at this time probing 
into other operations. On the contrary, concurrent with the development 
of financial procedures and controls by financial staffs were the develop- 
ment of other functional procedures and controls by other specialized staffs ; 
the inquisitive auditor broadened the scope of his audit to include such 
operating procedures and controls as he was familiar with and had the 
authority to audit. 


In 1947 Tue Institute or INTERNAL AvupiTors published for the 
first time a “Statement of Responsibilities of the Internal Auditor.” In it, 
the characteristics of internal auditing were defined in terms of its nature, 
objective and scope, authority and responsibility, and independence. This 
made possible and stimulated a tremendous advance for those engaged in 
internal auditing, for with the publication of this statement, a standard 
came into being. 


To develop this theme, it is not necessary to analyze the 1947 state- 
ment. It will suffice to say at this time that the 1947 statement defined 
internal auditing as an independent appraisal activity within an organiza- 
tion whose primary function is to review financial and accounting activi- 
ties but which may review other operations as well. That this first published 
statement clearly included other operations within the province of internal 
auditing, although permissively only, is a credit to the farsightedness of 
those who promulgated it. 


The continuing growth and decentralization of business enterprises since 
1947, combined with professional guidance and internal auditing stand- 
ards supplied by Tue Institute or INTERNAL AvupiTorRs, worked not 
only to increase the number of internal auditors employed by business 
enterprises, but to improve the value and stature of the internal auditing 
function. There is general agreement that the primary way in which internal 
auditing improved its value and stature was by broadening the scope of 
its audits to include the review of more and more of those aspects of a 
business enterprise which are commonly referred to as nonfinancial or 
operational. 


From the beginning the trend to broaden the scope of audits was quite 
natural. This fact can be readily appreciated if we consider first the defini- 
tion of internal control published by the American Institute of Certified 
Public Accountants in 1948 and second, the technical specialty of internal 
auditors in relation to this definition. 


Let’s consider this definition of internal control: 
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“Internal control comprises the plan of organization and all the 
coordinate methods and measures adopted within a business to safe- 
guard its assets, check the accuracy and reliability of its accounting 
data, promote operational efficiency and encourage adherence to pre- 
scribed managerial policies.” 


If we accept this definition and recall the control functions exercised 
by specialized staff activities, then surely we must agree that there are 
aspects of internal control present in all significant activities within a busi- 
ness: financial and nonfinancial. Most of us will also agree that the tech- 
nical specialty of internal auditors is that of being expert in appraisal of 
internal controls. 

Logically then, as internal auditing matured over the years, we could 
have expected more and more of the internal control structure of a business 
to be appraised by internal auditors. Put another way, the trend to broaden 
the scope of audits is equivalent to the trend of internal auditors to appraise 
more of the internal control structure of a business. 

In 1957, ten years after the publication of the first “Statement of 
Responsibilities of the Internal Auditor,” Tue Institute published a 
revised statement. The main revision was to delete the emphasis on review 
of financial and accounting activities from the description of the nature 
of internal auditing. As a consequence, the review of finance and operations 
were at least theoretically placed on equal footing. As we all know, actual 
internal auditing practice then and now falls far short of this theoretical 
concept. However, when we consider the 1957 statement as a standard to 
be attained and when we consider that the origins of internal auditing are 
rooted in accounting, the fact that accounting receives a substantial majority 
of the auditor’s attention is not surprising. 


THE BROAD ROLE CONCEPT OF INTERNAL AUDITING 


There should be no doubt at this time about the direction in which the 
internal auditing function is headed: increasing emphasis on nonfinancial 
auditing. I would like to suggest that the goal inherent in the 1957 state- 
ment is that the scope of internal auditing include the entire internal con- 
trol structure of a business: the many and diverse policies, procedures and 
other controls in both finance and operations. 


There has been great progress in the past decade in broadening the 
scope of internal auditing through research by Tue INstiITUTE oF INTERNAL 
AupiTors combined with research and pioneering-type audits of nonfinancial 
activities by auditors in many companies. This progress was statistically 
measured by Tue INsTiITUTE OF INTERNAL AUDITORS by comparing its 


“1957 Survey of Internal Auditing” with its 1951 survey. 














There are two items in connection with these surveys to which I would 


like to direct attention : 


1. Major functions covered in the internal auditing programs of re- 
sponding companies : 


Function 


Accounting 
Treasury 
Purchasing 
Sales 
Production 
Traffic 
Personnel 
Advertising 


While the progress shown since 1951 is heartening, it is clear 
that the scope of internal auditing remains preponderantly within 
the accounting function. 


a. Securing qualified personnel. 

b. How to audit operating departments. 

c. How to sell the value of internal auditing to management. 
The last two of these three problems are peculiar to the internal 

auditing function, and it is to them that the remainder of this paper is 

addressed. Since I believe these problems to be merely symptomatic 

of other underlying causes, I should like to identify and analyze 


them. 


THE DEVELOPMENT OF SPECIALIZED STAFF FUNCTIONS AND THEIR ROLE 


I have previously alluded to the specialized staff functions used by 
management to help guide and control large, decentralized business enter- 
prises. The organizational alignment of these staffs within a business varies 
depending on the particular business. Most decentralized businesses have 
central staffs for: Sales, Finance, Purchasing, Manufacturing, Production 
Control, Engineering, Personnel. These staffs usually report to an execu- 
tive level above the management level of the line organizational units. 
Each staff is comprised of personnel who are technical specialists in their 
particular field. Their responsibilities, in varying degrees, usually include 
planning, guidance, instruction and control of their counterpart line func- 
tions. They have a position of independence in that they report to a high 
central management level and because they are not directly responsible 
for the day-to-day activities of their counterpart line functions. This direct 
responsibility is that of the general manager of the line organizational unit. 
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2. The 1957 Survey, which requested the opinions of responding com- 
panies, revealed, in general, these problems to be uppermost : 


1957 1951 
%o of 322 Companies Jo of 86 Companies 
100% 100% 
75% 93% 
70% 47% 
50% 50% 
Jo 15% 
22% 
16% 
16% 
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These staffs perform their responsibilities in many ways: personal con- 
tact, technical instructions, procedures, technical appraisals and compliance 
reviews. 


CONTROL AND APPRAISAL CONCEPTS HELD BY INTERNAL AUDITORS 


Keeping in mind the generally accepted role of these specialized stati 
functions, we can view efforts to broaden the scope of internal auditing 
to nonfinancial functions as an attempt to revise some traditional manage- 
ment thinking with respect to the concepts of control and appraisal. 


Let us analyze this thinking and particularly the revisions contemplated 
by internal auditors in asserting the broad role concept of internal audit- 
ing. I have used the word “contemplated” purposely because I believe that 
what is contemplated by internal auditors is quite often not clearly com- 
municated to general management. Also, what is contemplated by internal 
auditors varies considerably between companies. 


Internal auditors are pretty much in agreement on the concept of con- 
trol. In effect, they are saying this: Internal auditors have traditionally 
appraised internal controls in finance. This is true, notwithstanding the 
fact that the direct responsibility for establishing and administering these 
controls is that of specialized financial staffs: Treasury, Comptroller, Chief 
Accountant, etc. Since controls in finance are but one part of the total 
internal control structure of a business, the function of appraising controls 
should be extended to include controls in the other major functions of the 
business. And, since internal auditors are experts in the appraisal of con- 
trols in finance, they are competent to appraise other controls. For the 
most part, general management has not thought of the controls established 
and administered by nonfinancial functions of the business as being sub- 
ject to appraisal in the same manner as financial controls. It is this think- 
ing that internal auditors are trying to revise in their efforts to broaden 
the scope of internal auditing. 


I should now like to analyze some differences of opinion that exist 
among internal auditors with respect to just what their appraisals apply to. 


One school of thought maintains that appraisals should apply only 
to the internal controls which comprise the total internal control structure 
of a business; that the appraisal of an entire function apart from its con- 
trol features should not be the mission of the internal auditing function. 


Another school of thought maintains that appraisals should not be limited 
to internal controls; that the appraisal of functions themselves should be 
the mission of the internal auditing function provided that the auditors 
are competent to make such appraisals. 
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I think it is important for internal auditors to evaluate and resolve 
these opposing concepts. One way to do this is by contrasting the practicali- 
ties of the objectives of each concept. 


The objective inherent in the first concept is to bring the entire internal 
control structure of a business within the province of internal auditing. 
This could be accomplished by applying the existing technical competency 
of internal auditors to internal controls in all the major functions of a 
business. This is feasible because the principles of control are the same 
regardless of the function in which controls are or should be operative. 
Furthermore, appraising the internal control structure of a business would 
not duplicate any other function in the business. 


The objective inherent in the second concept is for internal auditing 
to become, in effect, an Internal Management Consulting Service whose 
responsibility would be to appraise all functions of the business. However, 
the technical competency of present internal audit staffs would be inade- 
quate to make such appraisals. This fact can be appreciated if we consider 
the definition of appraise: “to estimate the value of.” I propose that only 
an expert or specialist can make an appraisal. For instance, it would take 
an expert or specialist in industrial engineering to appraise an industrial 
engineering function, just as it would take an expert or specialist in budget- 
ing to appraise a budgeting function. To staff the internal audit function 
to make such appraisals would, in part, duplicate the responsibilities of 
existing specialized staff activities. Most of us will agree that this would 
be economically unsound. This “Internal Management Consultant” con- 
cept is, I believe, an erroneous carry-over of an audit philosophy sometimes 
found in detailed audits of accounting functions. In such audits, because 
of the accounting expertness of internal auditors and because of extensive 
audit testing routines, an appraisal was offered on the function itself. While 
the value of internal controls within a function and the value of the func- 
tion itself are related, it does not follow that they are in any way propor- 
tionately related. For instance, the control over advertising functions may 
be extremely poor while the quality of the advertising itself may be 
excellent. 


The foregoing should not be interpreted as barring internal audi- 
tors from making an appraisal of a function itself in certain cases where 
this is the special purpose of the audit or a by-product of the audit pro- 
vided the auditors are technically competent. Nor should it be interpreted 
as barring management from making judgments on the value of a func- 
tion on the basis of an appraisal of the controls within that function. To 
the contrary, while the value of controls within a function and the value 
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of the function itself may not be proportionately related, it does not follow 
that there is no relationship. 


What should be concluded from the foregoing is that the appraisal of 
a function itself should not be the purpose or mission of the internal audit- 
ing function. 


COMMUNICATION OF BROAD ROLE CONCEPT OF INTERNAL AUDITING TO 
MANAGEMENT 

Having analyzed what is contemplated by internal auditors in assert- 
ing the broad role concept of internal auditing, let us attempt to analyze 
what is attually communicated to general management. Of course, this 
varies considerably between companies depending on the concepts and 
communicative ability of internal audit staff heads. Therefore, let us con- 
sider the 1957 revised Statement of Responsibilities of the Internal Audi- 
tor to be the broad-role concept of internal auditing which is generally 
asserted by internal auditing functions. 


In defining the “Nature of Internal Auditing” the revised statement 
says: 

“Internal auditing is an independent appraisal activity within an 
organization for the review of accounting, financial and other opera- 
tions as a basis for service to management. It is a managerial control 
which functions by measuring and evaluating the effectiveness of other 
controls.” 

Not considering the second sentence of this definition for the moment, 
I believe the first sentence might well be interpreted by general manage- 
ment as being somewhat presumptuous and economically unfeasible. It 
could be considered presumptuous because of the use of the word “inde- 
pendent.” For example, there are many other specialized staff activities 
that report to comparable levels in the organization who also perform 
appraisal functions. Since independence is a relative thing, it seems pre 
sumptuous for internal audit staffs to tout their independence when the 
independence of other specialized staffs is comparable. I believe the use 
of this term is a carry-over of a public accounting philosophy. The term 
independent applied to public accountants or outside management consult 
ants who are employed on a contract basis and are not employees has real 
meaning because the independence of such outsiders is, relatively speak 
ing, far greater than those in an employee capacity. 

It could be considered economically unfeasible because of the use of the 
word “appraisal.” Internal auditing is referred to as an independent ap 
praisal activity for the review of accounting, financial and other operations 
This implies and could be interpreted to mean that internal auditing is an 
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appraisal activity that reviews accounting, financial and other operations 
and appraises these operations. In the first sentence, the major emphasis 
is on the review of accounting, financial and other operations. A natural re- 
action of general management is to question this function first from the 
standpoint of competency and second from the standpoint of economic 
feasibility. For example: Is the internal auditing function competent to 
make the kind of appraisal of various operations that can be and is obtained 
from technical specialists on other specialized staffs? Is it economically 
feasible to staff the internal auditing function with technical specialists? 
Would this not be a duplication of a part of the responsibility of other 
specialized staffs? ‘ 

Considering now the second sentence, it, of course, supplements the 
first. It defines internal auditing as a managerial control which functions 
by measuring and evaluating the effectiveness of other controls. Here the 
emphasis is on the evaluation of controls. However, the evaluation of 
controls and the evaluation of operations are not mutually exclusive, and 
both concepts are contained in the definition of the nature of internal 
auditing. The result is that general management may have difficulty in 
obtaining a clear understanding of the nature of internal auditing. 

In the foregoing, I have attempted to cover the underlying causes which 
are responsible for some managements’ reluctance to broaden the role of 
internal auditing. In what follows, I shall propose some specific clarifica- 
tions to the broad role concept of internal auditing and a program to achieve 
a broadened role for internal auditing in individual companies. 


PROPOSED CLARIFICATIONS TO THE BROAD-ROLE CONCEPT OF INTERNAL 
AUDITING 

We have previously reviewed the development of the broad-role con- 
cept of internal auditing. During this period, modern internal auditing was 
in its infancy striving for increased responsibility and stature in business 
organizations. The ground to be covered and the learning to be done in 
extending the scope of audits to operations was tremendous. At this early 
stage, precise clarity with respect to the nature and ultimate role of 
internal auditing was not essential to a gradual expansion of the scope of 
internal audits. However, in recent years general managements’ greater 
contact with internal auditing in more and more nonfinancial functions 
has brought to a head, in many companies, questions of feasibility and 
desirability in expanding internal auditing to all functions of a business 
The many research projects by THe INstiTUTE and the experience of 
many internal auditors with audits in such functions as Purchasing, Pro- 
duction Control, Traffic and Personnel has, in my opinion, brought internal 
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auditors and the management of their companies to a point where a clearer 
and more direct statement on the nature and role of internal auditing is 
needed to accelerate a general achievement of a broad role for internal 
auditing. 


With this in mind, the following proposals for clarifying the 1957 
“Statement of Responsibilities of the Internal Auditor” are offered: 


1. The statement should not imply or be capable of being construed to 
imply that the objective of internal auditing is the review of opera- 
tions or the appraisal of performance. The clear primary objective 
of internal auditing should be the appraisal of the many and diverse 
policies, procedures and controls that make up the internal control 
structure of an organization. 


2. The statement should define internal control in the broad terms 
adopted by the American Institute of Certified Public Account- 
ants. 


3. The statement should identify the nature of the special expertness 
of the internal audit activity (appraisal of internal control) and 
clearly distinguish this specialty from the specialty of other internal 
staff activities. 

4. The reference to independence should be deleted from the statement. 
Objectivity and organizational status, the components of independ- 
ence, can be covered without characterizing the internal auditing 
function as independent. 


HOW TO APPLY THIS CLARIFICATION IN INDIVIDUAL COMPANIES 


At this point, you may be wondering how to apply the foregoing con- 
cepts in practice. In this regard, we have recently applied them at Chrysler 
by developing and executing an integrated broad-scope audit program 
encompassing all major functions of the business. As a result of our ex- 
perience, we would like to suggest a program which we believe can be 
used as a guide to launch broad-scope auditing in individual companies. 
While this program is applicable primarily to multi-plant industrial organi 
zations with specialized central staff activities, we believe the principles 
involved have general application. 


COMMUNICATE AND SELL BROAD ROLE CONCEPT OF INTERNAL AUDITING 
TO MANAGEMENT 

As a prerequisite to ~ formal attempt to communicate and sell a broad 
role for internal auditing in individual companies, audits of nonfinancial 
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functions, performed either separately or preferably in connection with 
financial audits, should be undertaken and accomplished. 1 am referring 
to audits of Purchasing, Production Control, Traffic and others. These 
can be undertaken informally, after securing the cooperation of local man- 
agement. This type of experience is necessary as evidence to support the 
competency of the internal audit staff to appraise controls in nonfinancial 
functions. There are at least two main approaches to such audits. The first 
approach is to extend the testing and analysis of financial transactions to 
the nonfinancial function. The second approach is to select, analyze and 
test transactions of the nonfinancial function based on a review of the 
organization, responsibilities and control features of the nonfinancial func- 
tion itself. Obviously, both approaches have their merits, and I submit both 
should be used since they are not mutually exclusive. However, if a truly 
broad role concept for internal auditing is to be asserted, exclusive adher- 
ence to the first approach would be restrictive in that it would not result 
in the kind of experience necessary for internal auditors to assert their 
competency to achieve the objective of the broad role concept: appraisal 
of the internal control structure of a business. 


After the internal auditing function has gotten a number of these non- 
financial audits under its belt, the time should be right to formulate a 
program to integrate financial and nonfinancial auditing into a single broad 
role approach to auditing on a company-wide basis. Incidentally, recog- 
nizing the wide scope of audits called for by such an integrated audit 
program (i.e., Purchasing, Sales, Finance, Personnel, Engineering) we 
can appreciate more fully why an appraisal of the many functions involved 
would not be feasible. A program of this kind should initially be proposed 
by the head of the internal auditing function to top financial management 
who in turn should propose it to the top echelon of general management. 


As a minimum, the proposal should cover these points: 


The purpose: To make internal auditing more valuable to man- 
agement by expanding its scope to include the entire internal control 
structure of the company. 

Jackground: The trend to broaden the scope of internal auditing 
in recent years. Guidance from THe INSTITUTE or INTERNAL AUDI- 
tors. Worthwhile “pilot” audit of nonfinancial functions by the com- 
pany’s own internal audit function. 


Definition of the nature of internal auditing: 


Suggested: “Internal Auditing is a control activity within an organ- 
ization that appraises other controls which comprise the organiza- 
tion’s internal control structure as a basis for service to manage- 
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ment. It functions by reviewing the financial, accounting and 
operating activities of the organization.” 


Definition of internal control: 


Suggested: The official definition published by the American Insti 

tute of Certified Public Accountants previously quoted. 
Steps necessary to develop and launch broad-scope audits: 

Survey of all major functions of the business, including both cen- 
tral specialized functions and representative counterpart line 
functions. Review policies, procedures, and reports. 

Determine control features in each function and develop audit ob 
jectives for each function together with audit procedures to 
test and appraise the control features. 

Review audit objectives with management in each function and 
solicit suggestions. 

Develop an audit time coverage cycle for the company. 

Integrate the most relatively significant audit objectives in each 
function into a single audit program giving consideration to the 
audit time coverage cycle. 

Perform a number of “pilot” broad-scope audits at company loca 
tions to refine the audit program and to further familiarize inter- 
nal audit personnel in its execution. 

Develop a procedure on audit reports, replies to audit reports, and 
follow-up to realize the benefit of auditing efforts. 


Compare the cost, coverage cycle and scope of the current internal 
audit approach with that proposed. 


DEVELOP METHODS TO REALIZE MAXIMUM BENEFITS FROM BROAD-SCOPE 
AUDITS 


After authorization has been secured to develop the broad-scope audit 
program proposed, the spotlight will be on the internal audit function 
to make good on its proposal to increase the value of internal auditing. 
The survey and “pilot” audit phase of the program will be most crucial 
to the success of the entire effort. It is during this phase that the audit 
staff must become familiar with the organizational philosophy and manage- 
ment concepts in all major functions of its company because these factors 
should play a big part in determining the methods of reporting audit find- 
ings, replying to audit reports and following up on audits. The effective- 
ness of these methods is vital to the effectiveness of the audit function. 
Of course, this is true regardless of the scope of audits and you may 
ask why it is specially mentioned here. The reason is that the methods 
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used in a particular company in connection with financial audit may very 
likely be inappropriate for broad-scope audits. For example: 


Financial audit reports in a particular company may be addressed 
to the comptroller of the location audited. Replies may be addressed 
to the company’s comptroller or financial vice president. Follow-up to 
guide and verify the implementation of audit findings may be the respon- 
sibility of the local comptroller, the company comptroller or perhaps 
the audit staff. 


This method is usually quite satisfactory for financial auditing be- 
cause the organizational alignment in most companies gives the com- 
pany comptroller or the financial vice president either direct or func- 
tional responsibility for financial matters and as such, they can require 
the local comptroller to reply to and implement the audit findings. 


On broad-scope audits, it is obvious that the foregoing method 
would be inappropriate because in most companies, organizational align- 
ments do not give the financial function authority over other functions. 
Depending on a particular company’s organization and management 
concepts, the responsibility for functions such as Sales, Purchasing, 
Manufacturing, Engineering, Personnel and Finance may be entirely 
vested in a single authority such as a general manager of a location; 
or, the responsibility for such functions may be divided: direct or line 
responsibility by the general manager and functional responsibility by 
counterpart central staffs for each function. Again, depending on the 
particular company, central staff functions may or may not have the 
authority to establish mandatory and/or optional procedures and report- 
ing requirements for their line counterpart functions. 


The diversity in organizational alignments and management concepts 
between companies should make it clear that the method adopted to report 
audit findings, make replies and follow-up should be tailored to suit the 
organizational characteristics of each company. Unless these characteristics 
are recognized in setting up audit reporting, reply and follow-up methods, 
broad-scope auditing efforts, no matter how good, will not produce the 
benefits management expects. 


A broad role for auditing has already been achieved in some com- 
panies. From this knowledge, internal auditors and management in other 
companies know it can be done. Internal auditors in all companies should 
take advantage of the strides already made and wherever possible, accelerate 
their efforts to broaden internal auditing. The opportunities to be of greater 
service to management have never been better. 









































INTERNAL AUDITING FROM THE 
VIEWPOINT OF THE AUDITEE* 

By D. A. MILTON 

Plant Manager, Eight Mile Plant, Stamping Group, Chrysler Corporation 


W* at Chrysler take a very serious view of this whole matter of 
auditing and the results thereof. We feel that it is an important 
part of our whole control system. 1 should like to stress that internal audit- 
ing, as such, is hardly new at Chrysler. I don’t know whether the auditor 
got there first before Walter P. Chrysler or the other way around; but 
it’s been going on one way or another for about that long. I’m pleased to 
say, however, that in the last couple of years the scope of the internal 
auditing activities has been considerably broadened to cover the functions 
which we refer to here tonight as operational auditing. By definition, the 
operational auditing approach involves a situation where a variety of 
departments, personnel, production control, industrial engineering, pro- 
duction engineering, and a number of other groups were included in the 
audit review as well as the financial departments. This program at Chrysler 
had official sanction from the administrative committee with the internal 
audit group delegated to carry out this kind of review. It may be interest- 
ing for a few moments here this evening to relate to you how this problem 
was approached and what our early experiences in the field were. 


I’m going to relate to you our experiences at the stamping division 
in dealing with the broadened scope of operational auditing. First, it may 
be pertinent to briefly relate a little of the background of what the stamp- 
ing division is and what we do. The stamping division, so called, consists 
of a divisional staff and seven plants. In the division we are responsible 
for producing virtually all the sheet metal going into Chrysler Corporation 
automotive products. In addition, we control the die program for the con- 
struction of all tools and dies used in metal stamping. I might cite in this 
case that we do not ourselves produce all the dies, but the program is con- 
trolled through the stamping division; and in addition, we have a soft 
trim plant which makes a substantial portion of the total soft trim or 
interior trim requirements for the corporation. Our plants vary in size 
from a small plant employing about 900 people to the largest, where 
employment is close to 5,000. In total, our division employs about 19,000 
people and our plant average, therefore, runs a bit more than 2,500 people. 
We operate under a decentralized system with staff activities at the division 
and complete operating controls in each plant. Each plant has, of course, 


* Presented at a Detroit Chapter meeting. 
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a plant manager who has a complete staff for carrying out the activities 
within the plant and a plant comptroller and personnel manager, etc. 


Prior to the first comprehensive operational audit at one of our plants, 
we had a visit from the manager of our corporate auditing activities. He 
and his supervisor, who would be conducting examinations within our 
area, came over and sat down with the general manager and myself to 
tell us about their program. They outlined for us the purposes behind the 
program, the benefit which we could expect to receive, and asked for our 
cooperation, and outlined the approach which they would take. Subsequent- 
ly, the internal audit supervisor sat down with the plant manager and plant 
comptroller of the plant which they selected as their first stopping place. 
Once again at this meeting they tried to outline the purposes, aims, and 
approach to the engagement. I should like to note at this point that I think 
that these meetings were essential to setting a proper framework of refer- 
ence for this changed approach to the auditing situation. I think they did a 
lot of good in bringing about some mutual understanding and mutual interest 
in the program. 


Would that I could now say to you that once the program was proper- 
ly kicked off in a careful, planned way all was sweetness and light and we 
lived happily ever after. I think that it would be rather ridiculous for me 
to say that to a group such as this. No, it didn’t go quite that way. 
Actually on balance it was a pretty smooth situation; but there were points 
at which the thing flared up. One that comes to mind occurred when the 
auditors on the engagement entered into one department at the plant. 
I might add that pursuant to our agreement when they went into depart- 
ments outside finance, the plant comptroller or his representative properly 
informed the department involved that the corporate internal auditors 
would be there, so the proper steps in communication were taken. Irrespec- 
tive of this, there was a refusal on the part of the department to make 
the requested records available. The department head involved then checked 
his divisional counterpart and unfortunately got some support for this posi- 
tion based on a belief that the internal auditors should not be delving into 
that area. When this occurred, the thing was brought to my attention by 
the plant comptroller. I talked to the divisional staff manager involved, 
pointing out that this was an authorized corporate program and that 
there was basis for the position which had been taken. The divisional staff 
manager involved then checked with his corporate counterpart and found 
eventually that the position we had outlined was proper. This misunder- 
standing was in communication, as I think usually happens in these cases. 
In the instant case, the audit manager had carefully covered the whole 
audit program with the central counterpart in the department involved 
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and, he believed, had their full concurrence. Unfortunately, they did nothing 
to inform their functional counterparts at division or plant that they 
would be included in the future in the scope of auditing activities. It’s 
probably equally unfortunate that we hadn’t covered the thing as thorough- 
ly as we might have. In any case, it had to go back and the audit manager 
had to sit down, I guess, with the people in the function involved, corporate 
level, to once again clarify the approach before we got the thing back on 
the trolley. 


We learned some other things from this examination. For example, 
part of our agreement had been that when the audit group completed 
their examination and wrote a draft of their report they would sit down 
with the plant manager and plant comptroller and go over the draft with 
them in order to assure themselves that they’d cleared up any points that 
were susceptible to clarification at the plant level. Our intention in pro 
viding this was that we not have a disagreement on fact. Interpretation 
and opinion are, after all, something that each of us has a right to; but 
it seemed to us that there should at least be established fact. As a further 
step in our process, we’ve provided that subsequent to this review by the 
audit group with the plant manager and plant comptroller of the location 
audited the draft be reviewed with my office and the office of the general 
manager, if appropriate, prior to publication throughout the various inter- 
ested groups in the corporation. This was inserted in our plans so that if 
any action taken by plant had been attributed to a divisional policy or pro- 
cedure, or to divisional instructions, there could be proper clarification at 
the divisional level if any confusion existed. Once again, a matter of try- 
ing to get the facts straight. When we received the first report for review, 
and as- we went over it, some items occurred that seemed to us to be 
questionable, not from the point of view of the integrity of the auditing 
group, but from our understanding of how some of these items had operated. 
In checking back, we found that our impression in this individual case was 
right ; that the auditors hadn’t been given all the facts insofar as we were 
concerned, On checking through, we found that there were some groups 
who had planned to clarify the situation in the audit reply. We turned 
that one around mighty quickly, you may be sure. Our attitude is that this 
matter of auditing (it’s even truer of operational auditing than when audit- 
ing was confined to financial affairs) is not a game of give and take for 
the auditor to make charges and the auditee to deny them. We feel very 
strongly that all questions of fact should be resolved between the auditor 
and the auditee; and that the audit report should, therefore, set forth the 
facts, properly agreed facts, and recommendation, if appropriate, for con 
structive, corrective action. On the other hand, we feel that the reply to 
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the audit report should outline the position of the plant, the interpretation, 
the reasons for actions; and also, of course, where appropriate, outline 
the corrective steps that have been taken. Let me emphasize here that I 
don’t believe that free thinking people are always going to agree on inter- 
pretation; but I insist that they ought to get the facts together so that 
the differences can be drawn down to differences in interpretation, and 
proper decisions can then be made by appropriate authority as to which 
interpretation is to prevail. I’m happy to say that as a result of the clari- 
fication of approach that went into that first examination on this matter, 
in any subsequent auditing of our activities (and there have been several 
in the last couple of years, as they covered pretty much all of our organiza- 
tion), there have been no unresolved questions of fact at any time in the 
interim period. We haven't always agreed on interpretation, and we prob- 
ably never shall. 


Under our system at Chrysler the completed audit report is sent to a 
variety of people. Copies of the total report go to the group executive, 
the group vice president, the corporate comptroller, the division general 
manager, and the plant manager involved in the examination ; an informa- 
tion copy is sent to the public auditors, Touche, Ross, Bailey and Smart. 
In addition, portions of the report go to the executive functionally respon- 
sible for the various departments covered. For example, all sections dealing 
with the personnel department are reported to the corporate head of per- 
sonnel, and the same with industrial engineering, production control and 
such sections. In addition, the various managers in finance who have a 
functional interest in sections of the report are provided with copies for a 
follow up, é.g., reports on the budget areas are sent to the corporate budget- 
ing manager. As a result of this process of distribution, not only are top 
management people informed of the results of the examination, but de- 
partments with representative functions in the plant being audited are also 
apprised of the audit findings. These groups, in fact, are responsible for 
appropriate follow up to division and plant to determine whether they can 
be helpful in instituting corrective action. We believe that this is an impor- 
tant part of our program, and it’s causing the central functional counter- 
part to know the problems as they’re actually met on the firing line. I 
think it helps the central groups mold their policy and procedure to the 
practicalities of the operating situation and does a great deal of good. This 
matter of the report, its distribution and the texture thereof brings me to 
another point in this experience which I should like to discuss briefly. 


I refer here to the tenor, if you will, of the reporting. I believe that one 
of the biggest factors in what I consider to be the success of this program 
at Chrysler (at least I can speak for my group of plants) has been the 
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tenor of the reporting that we have received. This, | might add, is one 
of the benefits of the review process that we’ve gone through. When we 
had our first report, the care and time the auditor took with us, once we 
had covered the facts of the report, in putting it in a tenor that was help- 
ful and constructive as against being critical and destructive has, I think, 
contributed immeasurably to the success of the program. We all know that 
there is more than one way to say things. There are many, many; and 
it seems to me particularly important that the auditor in writing his report 
(even more important, may I say, when it’s an operations audit cover- 
ing a variety of departments) not set himself forth as a prosecutor in a 
murder trial pointing fingers and making charges, but rather as a business 
consultant commenting on what he found and making suggestions for 
constructive action wherever possible. Gentlemen, I’m not suggesting in 
any way that all of the facts and the proper interpretation thereof should 
not be put on the table. I am saying there’s more than one way to skin a 
cat. When the auditor approaches the problem constructively from a point 
of view of working with these people, working as a business consultant, 
telling them what he found, he can get his job done more effectively. 
Who was it who said, “Beauty is in the eyes of the beholder.” I think 
that’s awfully true, gentlemen. We must report what we find. We don’t 
need to be insulting in doing it, and the constructive tenor of the reporting 
that we have received is, as I noted a moment ago, extremely important 
in the whole success of the program. 


Now, has this program done any good? I’ve indicated by my remarks 
over the last few minutes in a variety of ways that I certainly believe it 
has. It has certainly, at our division, my endorsement, the full and com- 
plete endorsement of the general manager and the group executive. We 
feel it’s our greatest protection. We've gotten a lot of good out of it. We 
learned a lot of things and we’ve used this information in a variety of ways. 
For example, at the conclusion of the first examination we took each item 
that the auditors found that required attention and broadcast to all of 
our plants the situation involved, requesting that they immediately check 
their activities in that particular area and take corrective action where 
required. In addition, the audit manager periodically publishes a document 
setting forth a summarization of all their findings in all of the audits 
throughout the corporation. They don’t name the perpetrator when they 
do that, they just mention what they found. We make excellent use of 
these in seeing that such items are checked out as soon as may be possible 
at our plants. Quite often we ask them to report to us on what their 
situation is in the particular areas covered. As a result of this, I think 
that we get an awful lot more auditing for a dollar, if you will. The 











60 The Internal Auditor 


broadening of the audit program to cover these other departments in opera- 
tional auditing concept has made important contributions in making the 
people in the departments covered by the examination conscious of the 
significance of many of the actions they take. It has certainly resulted in 
improvements in any number of cases, and some of the things brought 
to light have certainly been helpful in strengthening our cost control 
activities. That, briefly, is the impression that I have after having been 
on the other side of the table through operational auditing at Chrysler 
over the last little while. Pretty much we look back on it as a good experi- 
ence. We're still speaking, the auditors and we. We have strengthened 
our controls. We have learned a lot. We're still learning. By and large 
the program has been-a very good one from our point of view. As I 
pointed out, it wasn’t hearts and flowers from the start to finish. It was a 
group of business people learning how to do things together to their mutual 
benefit. 


Now I'd like to point up some observations on this whole matter of 
operational auditing. I believe that there are some things to remember, 
if you will. In particular, I would like to direct a few remarks to the 
problem of approaching the audit in a nonfinancial area. It is, after all, 
an important part of this thing, isn’t it? It’s been a long way from the era 
of the green eyeshade and the desk facing the wall to the position which 
the financial individual holds in most enlightened management today. I 
trust that this change that we’re talking about here from internal auditing 
being confined to financial activities to operational audits with their broader 
implications is an important part of the recognition of the part that the 
properly trained and oriented financial individual can contribute to the 
success of business today. 


When approaching an audit in nonfinancial areas, it is possible that 
procedures may not be as clear-cut or the policies established by manage- 
ment as well interpreted as in financial areas, since they have not been 
subject to constant challenge. 


Over the years, because of the attention given to the financial area 
by the internal auditor, deficiencies have been detected and called to the 
attention of the responsible individual, and these deficiencies were never 
permitted to build up. Where procedures to cover current conditions were 
either inadequate, nonexistent, or obsolete, these items were highlighted 
in the audit reports, which were brought to the attention of the level of 
management that could take the necessary action to correct the situation. 
The internal auditor with the opportunities to review the operating of 
financial activities in numerous plants was also in a position to discover 
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improved methods and pass the information along to operations, which 
could use the information to good advantage. 


Over the years alert management, taking full advantage of the audit 
reports, could have complete coverage on procedures and could have 
established proper interpretation of established policies. 


This, however, may not be true of nonfinancial areas, which did not 
have the advantage of periodic review of their activities by an independent 
group. It’s reasonable to assume under such conditions that some pro- 
cedures may be outdated or some operations not covered by procedure 
and also to find violations or misinterpretation of established policies. 
Inefficiencies could also exist which could have been eliminated by knowl- 
edge of better methods. Errors in reporting because of misunderstanding 
and many other deficiencies which may be costly to operations may have 
continued undetected. This background points up the need for the auditor 
to be properly prepared when approaching an audit of a nonfinancial area 


In order to obtain the confidence and cooperation of the auditee, the 
auditor must have an organized program. He should be acquainted with 
the organizational structure; he should review all established policics and 
procedures for the area involved and discuss them with corporate staff 
personnel responsible for development of policy and procedure, especially 
in areas which are not thoroughly understood. Also, the auditor should 
discuss areas involved with line management. In this way he may be 
alerted to problem areas. 


A few suggestions occur to me on approach in nonfinancial areas: 


The auditor should avoid getting into the technical aspects of a 
function if he is not qualified, concerning himself with the soundness 
of the job on the basis of end results rather than the way it is being 
performed. 

Do not demiand the same accuracy required of bookkeeping, but 
rather in these nonfinancial areas evaluate the use of the information 
and determine whether the degree of accuracy is warranted by the 
end results. 

It is important not to take sides in conflicts between departments 
unless after evaluation of both sides you are convinced through your 
audit findings that the facts conclusively support the situation. 

Minor inefficiencies should not be reported, especially if corrective 
action is taken by the individual responsible. This can result in a friendly 
feeling of cooperation. 
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I would like to turn now to a very important question that I am sure 
has been debated loud and long by many members of this group. I refer to 
the matter of the scope of the operational audit. Specifically, should the 
operational audit include an appraisal of the quality of work coming out of 
the departments, or should it confine itself to a review of adherence to 
policy and adherence to established procedure. I'm sure I don’t have to 
tell this group this is more than a subject in itself, and I’m going to con 
fine myself to stating that 1 am personally impressed that at this stage, 
at least, in the development of the operational audit concept, the audit 
activity should be reasonably confined to an appraisal of adherence to 
policy and procedure, to suggesting where additional policy clarification 
or procedural coverage. is necessary, and observation of the functioning 
within established controls. I don’t believe that in most cases internal 
auditing sections are staffed with groups of people qualified to comment 
on the technical ability in the various departments covered. 


I've tried to give you some few thoughts on what it looks like to be 
at the wrong end of the gun barrel. We haven't found it an unpleasant 
experience. We've learned a lot by it and we expect to learn a lot more, 
and I suggest to you that in its essence the operational audit is nothing 
more than the internal auditor taking his logical place in the broadened 
scheme of things for financial people in modern business today. 














THE ROUND TABLE 


Edited by ROBERT C. BAIRD 


One’s motto usually expresses a sentiment or a principle. Tur INstiITUTE’s 
motto, “Progress Through Sharing,” is in the latter class; it sets our goal 
and is our raison d'etre. There is no more convenient way of living up 
to our motto than to share our progress through contributing to The Round 


Table. 


\rticles should give factual case examples of special service to manage- 
ment by internal auditors. A review of articles already published will un- 
doubtedly bring to mind profitable auditing experiences in your own 
career; sharing them will be an inspiration to others. 

Send your contributions direct or through your Chapter to: 

The Round Table 

The Institute of Internal Auditors 
120 Wall Street 

New York 5, N. Y. 


Contributors’ names will be published only with the authors’ permis 
sion. Company affiliations will not be revealed unless the author so desires. 


UNEARNED CUSTOMERS’ BONUSES 


It was the practice in two companies to pay a bonus to customers calculated 
as a fixed percentage on the customer’s turnover for the year. The com- 
pany’s customers included a considerable number whose annual turnover 
was very small. The work of calculating and paying the bonus on these 
small amounts was considerable. 


The Audit Department suggested that the bonus shou!d not be paid to 
customers whose turnover failed to reach a certain minimum figure, and 
supported the suggestion with cost data showing that no profit was made 
by the company from customers whose annual turnover failed to reach 
about $50. 


The suggestion has been adopted, resulting in a direct saving on bonus 
of something over $7,000 annually; the number of bonuses individually 
calculated and paid each year has been reduced by at least 8,000. 


Scandinavian Chapter 
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THERE’S GOLD IN THEM THAR RENTAL BILLS 


An inquisitive auditor (what other kind is there) checking on field con- 
struction crews for his company noted the frequent appearance of rental 
invoices on the expense accounts. The items rented ranged from adding 
machines and typewriters through fork lifts, conveyors and trucks to large 
cranes. 


A form letter was developed and mailed to the suppliers involved re- 
questing information on the rents charged, especially in regard to the 
possibility of applying rental payments to the purchase of the equipment. 
Some of the replies received led to the inescapable conclusion that certain 
field men had availed themselves of the opportunity to acquire property 
at a very low net price by paying the balance due when the construction 
contract was completed. 


No action was taken against these men other than a reprimand, but 
the company removed any further temptation by sending this form letter on 
all field rentals and determining in each instance at what point it would 
be advantageous to complete the purchase and resell the item for a gain on 
completion of the contract. 


In some instances purchases of like equipment requisitioned by other 
divisions could be coordinated to the end that previously rented items 
were acquired at substantial savings. 


This little prospecting both opened up a new lode and removed a source 
of temptation from a highly trained group of employees. 
F. W. Kendrick 
Toledo Chapter 


AN INFORMAL ARRANGEMENT 


The top management of a manufacturing concern located in a small com- 
munity became suspicious of the Plant Manager as a result of stories and 
observations concerning his standard of living. A special audit was author- 
ized. As the audit developed, investigations of transactions between the 
manufacturing concern and local vendors were made. These revealed that 
for a period of several years payments were made by the company to a 
local vendor for materials not delivered. 


It was determined that the Plant Superintendent made day-to-day pur- 
chases of miscellaneous operating supplies from a local hardware store on 
a monthly charge account basis. The store did not issue counter tickets, 
but maintained an unsigned memorandum record of these purchases. Formal 
counter tickets were prepared at the month-end. 
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The audit disclosed that fictitious tickets had been prepared for a num- 
ber of purchases. In addition to miscellaneous items obtainable from the 
hardware store, the fictitious tickets covered sizable and repetitious charges 
for high unit-cost items of materials normally used by the plant, but not 
normally purchased from a local hardware store. 


Monthly the Superintendent visited the store, where he was shown 
only the bona fide tickets, which he verified and signed. Each month's tickets 
were then either picked up by, or mailed to, the Plant Manager, who forged 
the Superintendent’s signature on the fictitious ones. 


All tickets were then passed to the Chief Accountant who gave them 
to a typist for preparation of a confirming purchase order. The order, 
listing each ticket in detail, was passed to the Manager for his approval. 
When the Plant Clerk made his routine visit to the Accounting Office, the 
Accountant, on representation of signed counter tickets, would obtain the 
Plant Clerk’s signature on the receiving report copy of the purchase order 
as having received the material. 


Through collusion with owners of the hardware store, the Plant Man- 
ager received his share of the payments made for forged invoices. 


In this case, a combination of collusion, forgery and poor controls over 
the purchase and receipt of materials resulted in a loss to the company in 
excess of $50,000. 


Dallas Chapter 


WATCH THE BREAKING POINT 
A study of inbound truck shipments, made by the internal auditors, dis 
closed that several vendors were making daily shipments of less than 5,000 
pounds, which weight was the “breaking point.” That is, shipments in 
excess of this attracted a lesser rate per 100 pounds for the total poundage 


Furthermore, it was found that the common carriers allowed these 
shipments to accumulate on their docks, making only two deliveries a week 
to the Company’s plant. 


The auditors confirmed that these two weekly deliveries adequately 
supplied the plant and thereupon recommended that the materials be accu- 
mulated at the vendors, and that the latter only ship them in lots exceeding 
5,000 pounds. Adoption of this resulted in a very substantial saving 
approximating 25 per cent of inbound freight charges. 


Rochester Chapter 
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SOLVING THE PROBLEM OF UNIDENTIFIED 
SHIPMENTS 


In a department store, where the Department Managers were responsible 
for their own buying, the Receiving Room supervisor had a real problem 
in handling unidentified shipments. They averaged five a day and were 
mostly Parcel Post items. His procedure on these was: 

1. Contact all Department Managers who might have purchased the 
merchandise. This sometimes took a week before all concerned 
could review a shipment. 

2. Where merchandise was unclaimed after a week, he sent a prepaid 
telegram to the supplier requesting identification of the purchase. 

3. The merchandise was held in the Receiving Room awaiting a reply 
to the wire. 

The Internal Auditor recommended that the Receiving Room super- 
visor send the vendor a collect telegram immediately, in preference to con 
suming both his and the buyers’ time. 

The recominendation was adopted, with the following results: 

1. Merchandise is usually identified within twenty-four hours. ( Most 
suppliers accepted the collect wires.) 

At least 500 hours of supervisory time is saved annually. 

3. A buyer's time is not wasted in reviewing a shipment he did not 

order. 

4. The Receiving Department has more room to work in. 

5. The Company saves about $200 annually in telegram costs. 

It is also anticipated that suppliers will avoid collect wires by more 
carefully identifying shipments. 

Cincinnati Chapter 


SERVICE REVENUE CAN BE INCREASED 
During the audit of the Service Department of one of our machinery 
Divisions, it was noted that service revenue represented only 5 per cent of 
the department's expense for the first six months of the year. The previous 
year had shown a 10 per cent recovery. Both seemed unreasonably low. 
Our three other machinery Divisions were reviewed and found to be aver- 
aging a 50 per cent recovery. 

Certain facts were gathered upon an expansion of our audit scope: 


1. Billing rates had been set five years ago and not changed since. 


2. Although a “minimum” service billing was authorized procedure 














The Round Table 67 
for service calls, there were instances where billings, based upon 
time reported, were less than minimum. 

3. While a one-year guarantee existed for defective parts and work- 
manship, this was being construed as one year’s free service, even 
though service reports indicated customer's fault. 

4. Regional Sales Managers were allowed to determine whether a 
service call was chargeable or not. This was not subject to Home 
Office approval and resulted in different interpretations of chargeable 
service in each region. Sometimes “no charge” service on old ma- 
chines or customer-fault breakdowns were justified by Regional 
Sales Managers as a selling angle for good accounts. 

5. The order acknowledgment stated that on original installations a 
serviceman would be available for a certain specified number of days 
at no charge. All time spent with the customer in excess of this 
period was to be billed at per diem rates. It was noticed that this 
clause was not being regarded, even though in instances the cus- 
tomer delayed, or changed his mind on location, or used our service 
people to train his own maintenance personnel. 

Our audit report to the General Manager of the Division brought im- 
mediate results. He instructed the Division Sales Manager to dévelop a 
firm service policy, in writing, covering all possible areas of individual 
judgment. This new policy is now working effectively and should result in 
about $30,000 more income per year. 

Southern New England Chapter 


* * * 


INDEPENDENT APPRAISAL PAYS OFF 


A review was made by our internal auditors of the controls established in 
our newly installed E.D.P. system (IBM 705). 

In order to fully understand the system and its related clerical areas, 
a careful analysis of the procedure write-ups and work flow charts was 
made, and the controls evaluated. 

During the course of the review it was noted that certain information 
being key-punched was available as output from the 705. This was pointed 
out to the systems personnel, who corrected the procedure, thereby elimi 
nating three key-punch operators and their machines at an annual savings 
of approximately $10,000.00. 

Determination of the adequacy of controls is the primary purpose of 
this type of review, but so many times the results are recommendations to 
streamline the system at a savings to your company. Internal auditors should 
never lose sight of the potential value of their independent appraisals. 
Ak-Sar-Ben Chapter 
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CONTROL OF HIRED TRANSPORTATION COSTS 


The principal objects of our transportation audit were (1) to evaluate the 
control provided over hired transportation, (2) to determine whether units 
were procured economically and utilized efficiently, (3) to suggest ways to 
achieve a reduction of out-of-pocket expense. 


My company, which is located in Venezuela, purchases an extensive 
amount of transportation to fulfil the requirement to transport employees 
between their homes and job sites and to move large volumes of materials 
from warehouses to work areas, and from one location te another. 





The audit commenced with the usual review of control and payment of 
transportation invoices. Following the analysis of transportation costs, the 
auditors travelled to various field areas where they observed both company- 
owned and hired transportation usage, and studied the requirements. 
Information obtained by reviewing daily material shipments, studying the 
occupancy percentage of personnel carriers, and reviewing schedules and 
routes covered by all transportation units enabled the auditors to recommend 
changes in the amounts and types of transportation actually needed. 


An examination was made of transportation records for documented 
evidencé of bids solicited from available transportation companies for supply 
of the type of transportation that our company required. At the request of 
the auditor, bids were solicited, and it was disclosed that better rates and 
services were available at the date of the audit. 


The responsibility of the Transportation Superintendent in some areas 
did not include the supervision of all land, sea and air transportation, nor 
did he have control of transportation requirements in some outlying areas. 
In order to improve this situation and as a direct result of the audit, the 
Transportation Superintendent was given complete responsibility for all 
types of transportation, resulting in more effective coordination of the 
usage of company units versus hired units, with consequent cost reductions 

This audit disclosed that a reduction in the number of hired units could 
he effected by utilizing our own units more efficiently. Recommendations 
were made for rescheduling and rerouting various company and hired units 
so as to eliminate all unnecessary out-of-pocket expenditures. Audit recom- 
mendations to effect annual cost savings of an estimated $265,000 were 
discussed with Management and were categorically accepted. Some of these 
suggestions were not capable of immediate adoption due to circumstances 
and traditions, but immediate action was taken on approximately 50 percent 
of the recommendations, and we believe that all of our proposals are prac- 
tical and will be put into effect as soon as opportunity permits. 


Caracas Chapter 

















READERS’ PROBLEM CLINIC 


Edited by FREDERIC E. MINTS 


Do we really know that our controls are operating as intended? How 
effective are the traditional audit techniques in disclosing breakdowns in 
our systems? How can we guard against the possibility of apathy or failure 
to understand procedures? 


These soul-searching (to internal auditors) questions are given renewed 
emphasis by the disclosures in a current book, The Thief in the White 
Collar by Norman Jaspan with Hillel Black (J. B. Lippincott Company, 
Philadelphia, Pa., $4.95). Here the author points out the rapid growth in 
embezzlement—to the astronomical figure of a billion dollars a year— 
and the apparent parallel breakdown in general standards of ethics. After 
describing numerous case histories Mr. Jaspan places the blame for most 
white collar theft on the shoulders of top management. He points out that 
in many cases top managements rely on control systems which they assume 
are operating as intended without really being certain. 


As internal auditors we have generally accepted responsibility for deter- 
nining whether established control systems can be relied on. We must then 
take an objective look at our practices to make certain that we are fulfill- 
ing this responsibility. 

As one step in a preventive program, Mr. Jaspan suggests the use of 
created or deliberate errors (or fictitious transactions) to test the efficacy 
of control systems. While such a suggestion is distasteful to many auditors 
because of its overtones of secret-police techniques, we think it desirable 
to have a full and free discussion of the pros and cons within our member- 
ship. Accordingly we are devoting this issue of the Readers’ Problem Clinic 
to the start of such a discussion. 


In a limited inquiry we were able to find only one Institute member 
who has used the proposed technique. That member, Mr. Charles ]. Doerner 
of the Triple Cities Chapter, ably presents the argument for the auditor's 
use of “custom made frauds.” The opposition view is presented by Messrs. 
Dooley of Puget Sound, Ghesquiere and Mencotti of Detroit, Gilchrist of 
Tulsa and Lennon of Chicago. 


We hope that many of you will give careful consideration to Mr. Jaspan’'s 
proposal and discuss it with your fellow members. Perhaps it might be 
an appropriate subject for part of a Chapter meeting. At any rate, we 
shall look forward to receiving an expression of your views so that in a 


future issue we may summarize your reactions for the benefit of our entire 
membership. 
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ARGUMENT IN FAVOR OF CREATED ERRORS 


The proposal of inserting deliberate errors or creating controlled frauds 
in company records is, I believe, one of the best methods yet devised of 
testing the effectiveness of our internal control. It is primarily through 
this method that we can best evaluate, not only our system of control but 
also, the personnel who administer this control. 


There is oftentimes a vast difference between the theoretical operation 
of a system and the actual operation of a system. A company with a strong 
internal control on paper may, in reality, be the victim of untold losses 
by the white collar thief. It is only through the method of testing or trying 
our internal controls that we are able to determine how strong or weak 
these controls are. It behooves all of us to test our defense against fraud 
and determine its weaknesses before someone within our company does it 
for us. 


Auditors, as a group, tend to be conservative; this is commendable 
since this is a fine quality. We must not, however, allow ourselves to be- 
come ultra conservative to the point where we fail to be realistic. You 
may think you have excellent internal control, but do you really know? 
A dry run or a test by means of the controlled fraud is a good way to 
evaluate this. 


If an auditor wants to sell his ideas of internal control to management 
then he should be able to show management what could happen without 
proper control. I think your management will buy your ideas when pre- 
sented in that way—mine did. 


When a controlled fraud or intentional error is planted in your com- 
pany you can follow it through the various control points and determine 
exactly where your system, or personnel administering the system, is 
weak. 


We have used several controlled frauds at our company and as a result 
of them our internal control has been strengthened. When contemplating 
a test of this sort, rule number one should be—bring at least three members 
of your top management in on the plan and put your plan in writing. As 
a further means of personal protection, I believe it would be advisable for 
these men to initial all planned tests after they are written up and before 
they are tried. No deviation from the original written plan should be made 
except in writing and again it should be initialed by all of these men. 
Since we were running several tests we held daily conferences on the 
progress of our “frauds.” 

















Readers’ Problem Clinic 7\ 
I would suggest simple tests at first. Try submitting paid invoices to 
your accounts payable section even though they are marked or cancelled 
“paid.” Next, a test of a special handling item could be tried. For instance, 
if you are able to obtain a blank company check, prepare it on a typewriter 
to a fictitious payee and attach a note “please rush— backing will follow” 
then send it to the check signing area. The results might surprise you. 


The possibilities are endless—submit bills for material not received, 
try having a duplicate check issued stating that the first one was drawn 
to the wrong payee—use your own ideas since, of course, circumstances 
are different in all companies. 


You may find that oftentimes your control points are manned by im- 
properly trained clerks who are not aware of what they are looking for 
as their part of your internal control. 


Obviously there are, and will be, opponents to this plan of testing. 
My point is, though, wouldn’t you rather be the one to discover your own 
weaknesses than to have them discovered by the white collar thief? 


I think that the internal auditor is going to want this protection for 
his company. I think the internal auditor is going to want to test his com- 
pany’s defenses. I think that the realistic auditor is going to choose this 
way of testing exactly how strong or how weak his company’s internal 
control is. The choice is yours. 


ARGUMENTS AGAINST CREATED ERRORS 


The idea of introducing “created” or “controlled” errors to find out 
whether controls are working appears impractical and undesirable for these 
reasons : 

1. It places undue emphasis on fraud detection. Internal auditors have 

been trying for twenty or more years to get out from behind the 

“policeman’s badge” and gain recognition as contributors in a broad 

range of areas of service to management. This effort does not deny 

responsibility for detecting embezzlements; it merely attempts to 
place the safeguarding review function in proper perspective 

2. While the introduction of a “controlled” error can be kept secret, 
the first detection of the error will very probably disclose to all 
employees that management is using “sneaky” ways to see whether 
employees are properly performing their jobs. This obviously would 
not be intended by management but would be the most likely result 

regardless of the security employed. There are a sufficient number 
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of open and above-board checking methods available to management 
that there should be no need to resort to “controlled” errors. Em- 
ployee morale can be seriously damaged through the impressions 
created as a result. 


3. The most damaging case against “created” errors stems from the 
difficulty of controlling the management group which introduces the 
errors. Unless there is a publicized rule against having others in the 
company use such methods, some supervisors who learn of them 
may be inclined to conclude that, since the management employs the 
methods, why shouldn't they. But, normally, management would 
not publicize such a rule. The next step is that any supervisor caught 
in an incipient fraud could have the ready-made alibi he was only 
testing the efficacy of the controls. In the absurd, the cashier could 
pocket the day’s receipts to see if anyone would miss them. 
Carefully limited control of error introduction by certain top man 
agement does not provide ironclad protection against misuse of 
the idea. A number of the more flagrant embezzlements have been 
perpetrated by members of top management. Any possibility that 
employees in control critical areas will fail to adequately explore 
errors detected because the employees suppose this is just another 
of those d--- tests may dull what would otherwise have been a deli- 
cate sense of error perception. 


In summary, the undue emphasis that “controlled” errors place on fraud 
detection, the potential damaging effect on employee morale, and the diffi- 
culty of controlling error introduction ought to cause any management to 
approach this idea with a very wary eye. 


e P 6 D. E. DooLry 


Internal auditors need to be alert to all kinds of fraud and should recom- 
imend controls which will make it difficult for a prospective defaulter. Dis- 
covery of fraud has not been a major objective of internal auditing. An 
alert auditor should take steps to investigate unusual or suspicious areas ; 
however, he should not become overly suspicious. 


We have never recommended creating controlled errors (creating an 
error intentionally) for testing internal controls or for detecting fraud. 
We believe that detection of fraud is one of our lesser objectives and that 
a more constructive job of serving management can be accomplished by 
retaining the good will and respect of those we audit. There is real danger 
of losing this respect by tactics such as the use of controlled errors. Many 
sizable company savings have been effected by working closely, confiden- 
tially and cooperatively with others. 
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We also believe that areas of suspicion are usually better referred to 
our legal investigative group. They are in a more advantageous position to 
make investigations and to use controlled error techniques if necessary. 


-— - - C. J. GHESQUIERE 


I concur that the “Thief in the White Collar” is interesting reading, and 
I concur that management should be indicted for failure to take common 
sense precautions, in most instances. 


I have set down some points which, in my opinion, should be given con- 
sideration in connection with what can be gained and the probable price 
which the company will be called upon to pay for the gains: 


POSSIBLE GAINS 


1. Knowledge that an employee may not be doing his job properly. 
2. Some increase in accuracy and thoroughness of work, provided 


affected employees are aware of the “plants.” 

3. Some psychological advantage in areas not under test, provided all 
employees are aware of the “plants.” 

4. Discovery of some employee who is sufficiently interested in com- 
pany welfare to back track on errors, in lieu of merely reporting 
them. 


5. Pinpointing areas which require improvement in methods, 


PROBABLE PRICE 


1. The certainty that the plan cannot be kept secret 

2. Greater costs all up and down the line as employees begin to con- 
centrate on the possibility of entrapment, rather than upon the 
processing of routine work. 

3. The probability that honest employees will be alienated. 

+. System must be thoroughly checked out periodically before an accu 
rate determination of responsibility for failure to detect the “plant” 
can be made. (The system may be at fault!) 


wv 


The “plant” must be so designed as to entrap only the guilty area 
or individual, without casting adverse reflection upon other em 
ployees in the paperwork process. 
6. The loss of employees who can go to companies (or competitors!) 
who do not practice entrapment. 


“SI 


The loss of employees who prefer to work for a dignified company 
they can be proud of. 
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8. Damage to reputations of employees who leave for other reasons, 
and the possible repercussions therefrom. 


9. The upsetting of normal control measures. 


10. The loss of company stature which will occur in respect to commu- 
nity opinion. 


11. The certainty that vendor relations will suffer. 


12. The probability that recruitment will be adversely affected as pros- 
pective employees are informed of company policy, and the possi- 
bility of serious trouble if they are not so informed when hired. 


13. The use of this practice against the company at the bargaining table. 


It is quite apparent that most companies stand to lose a lot more than 
they can gain—especially when insurance is given due consideration. 
J. V. Mencorti 


a #: + 


Norman Jaspan’s book, “The Thief in the White Collar,” is interesting 
reading, and points up a real thorn in the flesh of business. The last chapter 
is of particular interest, as it deals with “A System of Preventive Manage- 
ment.” The author lists seven controls against internal dishonesty. The 
one with which I take issue is “Created Errors.” 


The use of planted errors to catch employees is, to say the least, a 
negative procedure. This approach is disappointing for two main reasons. 
In the first place, the plan of using “created errors” is too limited in scope 
to provide a reliable tool. The auditor would need to be even more ingenious 
in inventing errors than the careless or crooked employee is in making 
them. Also, the idea is based on the dubious practice of tempting, rather 
than preventing, dishonesty. Modern management has a basic responsibil- 
ity to remove temptation rather than create it. More positive controls can 
be accomplished in many ways, including: greater care in original employ- 
ment, re-investigation of employees when placed in vulnerable positions, 
and imaginative built-in controls as a routine practice, just to mention a 
few. 


In the second place, I consider it unfortunate that the author did not 
specifically include modern internal auditing, with its audit surveillance 
techniques, as the logical and necessary group that is best qualified to cope 
with the entire situation. It is rather common knowledge that the most 
vulnerable concerns are those with weak or ineffective internal auditing. 


W. R. Gitcurist 
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The suggestions made in the last two chapters present a philosophy which 
I believe most of us would consider sound, with the exception of a pro- 
posal which, ironically, begins on the next to last page of the book under 
the title “Created Errors.” Under this caption the authors suggest that 
created—“planted”—situations or errors should be used by management 
to test the efficacy of internal controls. And, I believe it can be assumed 
it was the authors’ intention that such tests be applied to all levels within 
the organization, as several instances were cited where those in responsible 
positions, if not actually “dipping into the till,” have “used” their position 
for personal gain versus the best interest of the company. A current item 
in this area at the top level is categorized under “a conflict of interest.” 


Regardless of the level of application, I stand vitally opposed to such 
a technique to test controls within an organization. Such a position is based 
upon certain philosophical grounds that not only affect the stature of our 
profession but strike at the core of what makes a company what it really 
is—its personnel. 


The profession of internal auditing has made tremendous strides in 
the past twenty years. Stress has been exerted to initiate and develop audit 
programs whereby we may be more constructively valuable to manage- 
ment. It has encouraged the adoption of audit techniques and appraisals 
to operations and functions other than those concerned with finance and 
accounting. However, in this march forward to “broaden our horizons” 
and to “audit for profit,” those that have blazed the trail have never inti- 
mated that we still do not retain a very important responsibility of render 
ing a protective service to management in order that it may have the 
assurance that the company’s resources are being properly controlled and 
safeguarded. 


Fully recognizing our responsibility in the protective area, I do not 
believe the created error or “plant” situation is a tool that should be 
encouraged by our profession. Such a procedure would be a retrogressive 
step on our part and would take us back to the time when we were con- 
sidered super sleuths—creating an atmosphere of fear and apprehension 
among those whose performance was being appraised or reviewed. 


In the protective phase as well as in other areas of our responsibilities, 
audits should be directed to the establishment of adequate controls by 
management, and to a review to determine that such controls are effective. 
The audit procedures whereby we accomplish these objectives may not be 
wholly inoffensive ; however, they certainly should recognize, for the most 
part, the dignity that every individual is entitled to. It is by this approach 
to the audit function that we have enjoyed and are continuing to enjoy 
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acceptance and respect by top management and other levels within our 
organizations. Such acceptance, of course, is gratifying, but most important, 
I believe, is that this approach has resulted in the audit function being 
more effectively utilized. 


Aside from the effect the created error or “plant” situation approach 
might have on our profession, I definitely believe that it would not be 
“good business.” 


The approach suggested, if known by the personnel (and I am convinced 
it would become known), will certainly not generate a loyalty and dedica- 
tion to one’s company. (If you should think otherwise—contemplate what 
your reaction would be if you were the victim of the “plant.” ) One of the 
most important ingredients of operating a successful company is proper 
and satisfying employee relations. Of course no company will be able to 
keep everybody happy ; however, I do not believe an organization is headed 
in the right direction when it becomes so overzealous in its idea of con- 
trols that it fails to give proper recognition to— 

1. The dignity of Man, (Which is one of the basic causes of unrest in 

the world today.) 

2. Human nature being what it is—with weaknesses being a part of 
all of us. (A point so well recognized that it is included in the 
most popular of all prayers—‘“. . . . and lead us not into tempta 
tion.”’) 


The authors could well have omitted the last two pages of the book 


in fact, I was quite surprised that they were included, for several times 
throughout the text the failure of individuals to overcome their temptations 
and weaknesses was attributed quite strongly to the lack of proper employee 
relations. 


F. W. 


LENNON 

















STUDENT’S DEPARTMENT 


Edited by A. J. PENZ 


PROFESSIONAL TOOLS 


UCH criticism has been leveled at higher education in business admin- 

istration for overspecialization, proliferation, and vocationalism. To 
the degree that these factors contribute to segmentation and lack of inte- 
gration of the various functional areas of business such criticism is justified, 
and proper steps should be taken to correct these shortcomings. It is appar- 
ent that a person who is primarily interested in accounting could not ade- 
quately perform as an internal auditor if he were trained in accounting 
only. Although accounting is considered an essential tool subject, the area 
of mathematics and statistics should not be neglected. 


It is generally felt among students, accountants, and auditors that 
statistics should be left to the statistician and that only the mathematician 
should be concerned about higher mathematics. Specialists are needed in 
these disciplines to keep them alive and to foster progress; yet it follows 
that students and businessmen, including internal auditors, should have 
a good working knowledge of each of these areas for greater effectiveness. 


In connection with statistics, Dr. Marshall E. Milligan explains, in the 
following pages, the basic concepts of statistical sampling. Much of the 
adverse reaction on the part of auditors to statistical sampling as an audit- 
ing tool is due to lack of familiarity with the various statistical concepts 
as is pointed out by Ellis W. Berry, whose article follows that of Dr. Mil- 
ligan. 


It is well to keep in mind that self-improvement through the study of 
tool subjects is in order for the internal auditor if he expects to keep 
abreast. All the university business student has to do is to elect more than 
a smattering of mathematics and statistics courses. The practitioner has 
night school, correspondence courses, various institutes, and in many cases, 
company training facilities available. 


A member of a profession cannot afford to plateau intellectually whether 
that be in medicine, law, or auditing. The dynamic nature of the business 
environment and the recent emergence of internal auditing as a differenti- 
ated business function call for continuous self-improvement. 


4/ 
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APPLICATION OF STATISTICAL 
SAMPLING TECHNIQUES IN 
AUDITING* 

By DR. MARSHALL E. MILLIGAN 
Economist, Skelly Oil Company 
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IMPLY stated, it seems to me that auditing basically is trying to “keep 

it clean.” That is, whatever your business, you as the internal auditor 
are trying to keep things clean, trying to keep poor procedures from piling 
up and trying to keep everything working efficiently. Now, it is not my 
intent to try to tell you what auditing is. Rather, I want to give you my 
impression of the internal auditor’s job as a springboard for my other 
remarks. 


I could begin by saying that “audit” sounds something like the word 
“auditorium.” The implication being that “audit” has something to do 
with listening. Thinking along this line and trying to tie it in with what 
| think you are doing, I am reminded of a doctor examining, listening, 
with his stethoscope. He is using a surface check or spot check to try to 
find out if there is anything wrong with his patient. Sometimes he feels 
that he has to probe a little bit deeper or press here or there. If his sus- 
picions are sufficiently aroused, the time comes when he uses his knife— 
usually in the hospital, of course—and cuts into things to see what is wrong. 
Generally, we would hope, he finds what is wrong and effects a cure. 


Now, it seems to me that, like the doctor, the internal auditor makes 
the regular check once a year on certain operations, and more often on 
other operations. At other times he makes special checks when manage- 
ment decides something needs checking—just as you make special trips 
to the doctor when you decide something is wrong with you. Sometimes 
it is just in your head, but you want a check anyhow. And so it is with the 
auditor who will have to make special checks from time to time. Again, like 
the doctor, the internal auditor is supposed to have the viewpoint of an 
outsider relative to the operation he is checking. Yet, at the same time like 
the family doctor, he has a continuing interest in the “patient.” 


Further, the internal auditor, like the doctor, is most concerned with 
preventing the illness from happening. He would rather prevent it than 
detect it afterwards. For example, we hear “Go see your doctor every 





* Presented at a Tulsa Chapter meeting. 
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year—let’s get checked for cancer.” What we are interested in is eliminating 
or preventing the thing from happening before it gets carried too far. Of 
course, some businesses are just like people. They don’t like to call in the 
doctor and oftentimes they don’t until it is too late. 


I might summarize this in one simple statement. Internal auditing serves 
management by checking and evaluating the effectiveness of management 
policies and controls. 


Now, let us turn to the subject of statistics in this auditing process. | 
suppose that you have all heard—because I ‘fink this is from some account- 
ing source—of the definition of a ey ay He is an individual who has 
his head in the refrigerator, his feet in the bven, anc on the average feels 
comfortable. There are other definitions, of course, of a statistician, and 
I am sure you have seen similar ones of accountants. But there is an aspect 
of truth in this definition—that the statistician is concerned with things on 
the average. I will attempt to bring this out a little later. 


Possibly, for some of you, this word “statistics” is a little foreboding. 
You were happy to get through with your course in statistics and you are 
now happy to forget it. I had a student the other day tell me, “Six years 
from now I intend to be doing accounting work.” My reply was, “Six years 
from now if you are doing accounting work, you are going to have some 
statistics involved in it, because statistics is becoming more and more an 
important tool of a good accountant.” 


The basic purpose of statistics, as I see it, is to describe a situation, 
to bring meaning out of a set of numbers, to try to develop a picture from 
a set of numbers. I suppose in one sense of the word, you could say that 
the accounting techniques that you are involved in have the same purpose. 
Let me give you an illustration, which might apply whether you are talk- 
ing about accounting or statistics, of bringing meaning out of a set of 
numbers. We are going to try to develop a mental picture, so visualize in 
your mind the following set of numbers. Before I start, let me say that 
so far as 1 am concerned they are theoretical. Here are the numbers— 
110, 63, 34, 34, 25. Now I am sure that most of you haven't the slightest 
idea what | am talking about, or maybe you are keener than I give you 
credit for. But if we attach a few quantity measures and rearrange these 
numbers in some order, you will begin to get a picture. The 110 would be 
pounds, the 63 would be 5 feet 3 inches, the other numbers would be 
arranged 34, 25, 34. And if you haven’t got a picture yet, add blond hair 
and blue eyes. 


Now it seems to me that whether we are talking about statistics or about 
accounting, the basic objective is getting some meaning out of a set of 
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facts. Of course, you can see by the illustration we just used, the facts can 
be numbers or quantitative information. And often the qualitative informa- 
tion will enhance the value of the picture that we are trying to develop. 


Basically, statistics is concerned with establishing averages or average 
relationships and with stating expectations about averages and about aver- 
age relationships. This is the basic difference between accounting and 
statistics. Accounting is not concerned with averages. It is primarily con- 
cerned with every one, putting each one down. Whereas, statistics is more 
concerned with what happened on the average and what can be expected 
to happen on the average in the future. Based upon knowledge of what 
has gone on in the past and on certain statistical concepts (or I could say 
mathematical concepts) we say, “therefore we expect this to happen,” or 
“in the future this will be the average relationship that exists between 
things.” 


Our concern, here, is the use of sampling or samples. This is one aspect 
of statistics and statistical analysis. However, the theory on which sampling 
is based is basic in the use of all statistical techniques. It is only in recent 
years that sampling and the theory behind it have begun to be considered 
the heart of business statistics. To me, it is so much the center of statistics 
that I introduce it in about the third week in the first course. So, what I 
want to do is try to establish for you some basic sampling theory so that 
you can begin to think how sampling might be used in solving your day- 
to-day problems. 


The basis of all sampling theory is probability. The understanding of 
probability that is necessary is rather simple. I am going to illustrate with 
a set of dice. Every time we roll six or below I pay a dollar, and every time 
we roll seven or above, I receive a dollar. Now this is not for real, be- 
cause I would win. The probability of getting a six or less is less than the 
probability of getting seven or more. 


This is a simple probability situation. If we threw 360 times, we could 
expect about 150 times to get six or less and 210 times to get seven or more. 
This comes from the probability distribution of the sum of two dice thrown 
at the same time. The probability distribution states the probabilities of all 
possibilities. In this case, the possible sums are two through twelve, and 
their probabilities are: 


MARSHALL E. MILLIGAN is an economist with Skelly Oil Company. Prior 
to this he was associate professor of economics at the University of Tulsa, statistician 
for the Pan American Petroleum Corp., and assistant professor of business statistics 
at the Umversity of Oklahoma. Dr. Milligan received his B.S. from Wheaton College 
and his M.A. and Ph.D. from the University of lowa. He is a member of the American 
Statistical Association and the American Marketing Association. 
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Sum Probability Sum Probability 

2 1/36 8 5/36 
3 2/36 Yy 4/36 
4 3/36 10 3/36 
5 4/36 il 2/36 
6 5/36 12 1/36 
7 6/36 nian 

36/36 


Note also that the sum of the probabilities is 36/36 or 1.00. 


You are using a very simple probability distribution when you say 
the chances are 50-50 something will happen. You are saying that the 
probability is .50 that it will happen and .50 that it won’t happen. The 
sum of these probabilities is 1.00. That is, you can be certain that it will 
happen or it won't. Or, if I roll this one die the probability is one in six, 
of course, that it will come up a three. What we mean in one sense of the 
word is that one-sixth of the time a three would come up if I rolled the 
die an infinite number of times. To make that ‘infinite’ number of times 
more manageable, we would expect a three to come up one-sixth of the 
time if for the rest of our life we stayed here and rolled this die. So we 
say, for a particular throw of the die, that the probability of getting a 
three is one-sixth. The probability of getting each of the six numbers is 
one-sixth and the sum of the probabilities is six-sixths of 1.00. 


Imagine that I have here a bowl which has in it 1,000 chips with a 
five on them, 2,000 with a six, and 3,000 with a seven. That’s a ratio of one, 
two, and three. If I pulled out 60 of these chips, I would expect to have 
approximately ten with a five, twenty with a six, and thirty with a seven. 
I can expect this simply because of the probabilities involved. It’s just like 
the rolling of this die, the probability is one in six that a three will turn 
up. If we threw this die sixty times, we could expect the three about ten 
times. If we threw it six hundred times, we could expect the three about 
one hundred times. In a series of actual experiments we would find that 
the more times we threw the die, the closer our proportion would be to 
one-sixth. This, in simple basic essence, is the basis of all sampling theory. 
It is never any more complicated than this, and it is never any simpler. 
So, from this, let’s develop some sampling theory. 


The probability distribution known as the normal curve is the heart 
of sampling theory. In basic essence, the normal curve is not different from 
the probability distribution of the sums of two dice we have already talked 
about. It’s another type and defines a different situation, but its logic is the 
same. It also states the probability of occurrence of specific values in 
various situations. 
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The normal curve is the heart of sampling because the frequency dis- 
tribution of the means of samples taken from any type of universe will 
be essentially a normal frequency distribution. The universe may be evenly 
distributed such as those numbers on the dice—one-sixth is the proportion 
of each of the numbers. The distribution may dip in the center—such as 
unemployment by ages, or may be humped in the center—such as employ- 
ment by ages. Whatever the original universe looks like, the sample means 
obtained in taking a large number of samples from it will be normally dis- 
tributed. You will pardon me, I hope, if I don’t indicate all the exceptions 
to some of the generalities | am making. Just like this one, if the universe 
is not normal, the distribution of sample means will not be precisely 
normal, but will be very close to it with sample sizes over 100. 


Now, what does this mean? First, let’s look at the normal curve. Most 
any statistics book has a normal curve table which states the probabilities 
in a normal frequency distribution. These probabilities are defined in terms 
of the mean and the standard deviation of a normal curve. The word “mean” 
is what you usually mean when you say “average.” That is, if we want to 
find the mean age of the people in this room right now, we would ask each 
one his age, add up the ages and divide by the number of them. We would 
have an arithmetic mean, or the mean age, which is often referred to as 
the “average.” At the same time, we recognize the fact that there are some 
of us who are younger and there are some who are older, so we are going 
to have a spread in our ages. The standard deviation is a number which 
is used to indicate how much this spread is. The further apart the ages are, 
the larger the standard deviation. Now, roughly speaking, the range of a 
group of numbers is usually about five standard deviations. So, we could 
say, if the ages of those in this room range from thirty to sixty, that the 
standard deviation of our ages is approximately six—that’s the range of 
thirty divided by five. The mean generally is near the center of the range, 
or about forty-five, in this case. 


We can expect approximately two-thirds of these ages to fall in the 
interval between 39 and 51, that is, one standard deviation (six) on each 
side of the mean (forty-five). The normal curve is the frame of reference 
for making this statement. The normal curve states a specific precise rela- 
tionship between a group of numbers and their mean and standard deviation. 
Fortunately, this normal curve relationship describes fairly well all sets 
of data which tend to have a bunching around their average. If we go two 
standard deviations (twelve) one each side of the mean (forty-five), we 
can expect 95 per cent of the ages to fall in this interval—33 to 57. 
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Now, if I were to take a half dozen of us at a time and find the mean 
age of that half dozen, I would be taking a sample of a universe and find- 
ing a sample mean. If I took different combinations of us, six at a time, 
I could get a large number of sample means. These sample means would 
tend to fall over a certain range, and they would have a standard deviation. 
This standard deviation of the sample means of our ages, of course, would 
be less than the standard deviation of our individual ages. If we increased 
the sample size, the range over which the sample means would fall would 
decrease, and likewise, the standard deviation measuring this range would 
decrease. We are again fortunate in that the normal curve very closely 
describes the relationship between the universe mean and this standard 
deviation of sample means. Or, as mentioned earlier, the distribution of 
the sample means will be approximately normal. 


Let’s suppose that we want to determine the average age of the people 
living in the City of Tulsa. We could count everybody, but we can also 
determine the average age by means of a sample. Suppose that the mean 
age in a sample of the City of Tulsa is 40 and the standard deviation is 
20. Based on this sample we could say that approximately 68 per cent of 
the ages in the city would be between 20 and 60, and 95 per cent of them 
between zero and 80. 


But, one might ask how close this sample mean age of 40 is to the 
actual average age of people living in the City of Tulsa. The mean of this 
sample is one of a large number of possible sample means. As just men- 
tioned, there is a specific probability distribution of the sample means, 
just as there was a specific probability distribution of the sums of the dice 
We can state, for example, the probability of getting a sum of five in the 
rolling of two dice. We can also state the probability that a sample mean 
will be within a specific interval about the actual average age of people 
living in the City of Tulsa. The scatter or the distance that these possible 
sample means are away from the universe mean is a function of sample 
size. The larger the sample, the closer we can expect the sample means 
to fall about the actual universe mean. For example, if the standard devia- 
tion in the universe is 20, the means of samples of size 100 will have a 
standard deviation of two. In other words, for samples of size 100, 68 per 
cent of their means would be just two away from the actual universe mean. 
If the sample size increased from 100 to 400, the sample means will have 
a standard deviation of one. Now 68 per cent of the sample means will just 
be one away from the universe mean. You can see that by multiplying the 
sample size by four the standard deviation was cut in half. For samples 
of size 1600, the standard deviation would be cut in half again. 
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We can make a probability statement about the sample mean just as 
we can make a probability statement about rolling a seven with a pair of 
dice. We know, as soon as we roll these two dice, that the probability of 
coming up with a sum of seven is six thirty-sixths. Making the assumption 
that the actual average age in the City of Tulsa is 40 and the standard 
deviation of those ages is 20, as soon as we take a sample of size 100, we 
know the probability is .68, or about two-thirds, that the sample mean 
will be no further away from the universe mean than two. 


This is a probability statement just like a probability statement about 
these two dice. It is no more complicated in basic understanding than a prob- 
ability statement about this set of dice. In making this probability statement, 
we are saying if we took an infinite number of samples of size 100, 68 per 
cent of the sample means would have a value that is less than two different 
from the universe mean. Therefore, in taking one sample of size 100, the 
probability is .68 that its mean will be no further than two away from the 
universe mean. Conversely, the probability is .68 that the universe mean 
will be no further than two away from the mean of a sample of size 100. 
This is the central or key idea in all sampling. It is the basis for under- 
standing what is meant by statistical statements about sampling results 
and understanding all types of sampling procedures. 


Question from audience: “By probability sampling, are you talk- 
ing about random sampling—each item in the universe has an equal 
chance of becoming a part of the sample?” 


Yes, that would be what I call a good sample. In my discussion I 
have assumed random sampling. We have to assume random sampling 
in making probability or statistical statements about sampling results. 


Question from audience: “How about a judgment sample where 
your knowledge of the universe is not so limited and certain portions 
of the universe you have a good knowledge of—you don’t have to 
take the universe as a whole, you can take a portion of it?” 


First, a judgment sample is good or bad, depending upon whether 
you say it is good or bad. Statistically speaking, you cannot say 
whether it is good or bad. But coming back to the type you are speak 
ing of, there is a certain area of your universe with which you are 
sufficiently familiar to say it’s O.K. Another part you say: “I am not 
quite certain of, so I am going to pick some here and some there.” 
When you get all through, all you can say is, “I think it is a good 
sample.” Someone else can say it is not a good sample and you can't 
disprove their statement. If, however, in place of picking your sample 
on this basis, you pick the same number of items using a random sam- 
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pling technique, you have a reliable sample reliable within limits which 
can be specifically stated. And, nobody can dispute you without disputing 
the laws of probability. With the same amount of work you can say 
something specific and definite. It requires no more work and the 
mystery is no more complicated than this set of dice. 


There are two or three types of basic sampling techniques you can use 
in your work as auditors. First, though, as our questioner just indicated, 
we are talking about a good sample. A sample in which we have given each 
item, whatever the universe, an equal opportunity of being chosen. It is 
referred to as a probability sample, a random sample, or simply a statistical 
sample. 


The first sampling technique might be referred to as a straight-forward 
random sample. With it we are simply trying to estimate the universe mean 
on the basis of a sample mean. Take the example of determining the mean 
age of the people living in the City of Tulsa mentioned earlier. We assumed 
a sample mean of 40 and a standard deviation of 20. With a sample size of 
400, the probability is .95 and the interval 39 to 41 will contain the universe 
mean. 


\ second sampling technique is the type used in quality control. To 
help understand it, think of a machine turning out bolts. We want the 
diameter of the bolts to be within specified limits. To do this, quality 
control limits are established and at specified time intervals small samples 
of the bolts measured. If the mean of the small sample is within the quality 
control limits, we say the machine is still producing the bolts within the 
desired specified limits. It is only when a sample mean falls outside the quality 
control limits that the machine is suspected of not producing bolts within 
the desired limits. 


A third sampling technique is called acceptance sampling. Suppose we 
are buying a large crate of the bolts produced on the machine just men- 
tioned. One way to check to see if they have met our desired specifications 
would be to measure each one of the bolts individually. In many situations, 
however, it would be sufficient to take a sample of, say, 100 bolts. If all 
100 were within specifications, we would be inclined to think that most of 
the bolts in the crate would be within specifications. If 99 out of the 100 
were within specifications, we would be inclined to think that most of the 
bolts were within specifications but with more outside specifications than 
when all 100 were within specifications. Tables are available which tell 
you the sample size and the minimum number of “defective” items you 
can accept and still maintain a desired quality of operations. 
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Each of these three basic types of sampling techniques can be used 
effectively in the sort of work you do day by day. In general, you can use 
sampling in any place where you now select a few items, by judgment or 
any other basis, to say (1) “Based on these few items, the average is so 
much.” (2) “Based on these few items, there are not too many errors, so 
let the activity continue.” (3) “Based on these few items, there are not 
too many bad, so we will accept the whole lot.” Of course, in (2) and (3), 
if there are too many errors, you call a halt and call the personnel respon- 
sible “‘on the carpet,” so to speak. 


There is a book entitled Sampling Techniques in Accounting. If you 
know little about sampling or about statistics in general, 1 would suggest 
that you read it first. And, don’t try to master it on the first reading. Get 
an idea of the things being talked about the first time through and then 
start doing your “digging.” There is another book entitled Statistical 
Sampling for Auditors and Accountants. It is a little more complicated 
than the first one I mentioned. Several of the topics covered are aging 
accounts receivable, confirmation of accounts receivable, and substantiation 
of inventory accounts. 


We will take a look at one of these examples in a minute. But, first, 
let’s take a look at how one of your own members uses statistical sampling 
in his auditing programs. I have here an audit program used by this man. 
I want to go through it and read where it says “Take a sample.” Under 
current liabilities: “from random sample taken on purchases, check name 
of payees and accounts shown on invoices to the vouchers.” Under sales 
and deliveries: “select random samples of the sales invoices and credit 
memorandums from the LP gas sales. Run for one month out of each 
quarter for the twelve months previous to the audit date for verification 
of invoice factors which include price, taxes,” and so on. Under purchases : 
“select a random sample of purchase vouchers for the current month and 
examine the bills of lading, delivery tickets, barge loading reports, and 
customer invoices, for correctness of product, gallons, weight, shipping 
point, price, terms,” and so on. Under transportation of LP gas products: 
“take a random sample of the vouchers on the above accounts and review 
each invoice to determine that the vouchers are for prepaid charges.” Also 
in the audit program, the method of determining the sample size is indi- 
cated. Tables from the book Sampling Techniques in Accounting are used 
in determining the sample size. 


Going back to one of the books, let’s look at a case dealing with aging 
of accounts receivable. Basically, the problem is: based on the age of the 
accounts receivable, what is the probable amount that will be received. 
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The probability factors used have been determined from past experience, 
or from a detailed study of a large number of accounts receivable and are 
used in conjunction with the ages of current accounts receivable which 
are determined from a sample. 


In the past a judgment sampling procecure was used. They took a 
sample of 15,000 accounts, or a little less than 10 per cent of the total 
number of accounts. When the auditor came to see if they did a good 
job of aging the accounts, he took another sample of about 1,500, or about 
10 per cent of the first sample. Again, the judgment sampling approach was 
used. 


3y using a random sampling technique, it was found that in aging the 
accounts receivable, a sample of 1,500 was sufficient to obtain the reliability 
required. When the auditor came to check the aging of the accounts, a 
sample of 126 was sufficient. Using a judgment sampling approach, in the 
past they went through 16,500 accounts. Now, by going through less than 
2,000 accounts, the same information is obtained with sufficient accuracy 
and reliability. 


This example illustrates. the primary advantage of statistical sampling— 
generally, the same degree of reliability is obtained for less cost. Further, 
specific statements of reliability can now be made. You aren't left to say 
“I think it is good.” Another important advantage of statistical sampling 
is that you can look in more detail at the fewer number of sampling items 
with less probability of making mistakes. To illustrate, consider the census 
taken every ten years. At the same time it is taken, the Bureau of Census 
asks the same questions of a small portion of the total population. The first 
reason is to have the information immediately instead of waiting for a year 
or two or three for the tabulation of all the large mass of information. 
The second reason is to get a better answer. By taking a good random 
sample, they can get a more reliable answer. In counting everybody they 
have to use many unqualified persons and mistakes simply crop up in 
such a large mass of information. By taking fewer in the sample and being 
able to go into them in more detail and with greater carefulness, you, 
also will end up with a better answer. 


In general, the use of statistical sampling will give an over-all increase 
in the information available and in its reliability for the same amount of 
money. Or, you can have the same amount of information with equal specific 
reliability as now for less money through the use of statistical sampling 
in your auditing procedures. 








88 The Internal Auditor 


SHOULD WE USE STATISTICAL 
SAM PLING?* 
By ELLIS W. BERRY 


Assistant Manager, Internal Auditing Department, Warren Petroleum 
Corporation 


UR “Statement of the Responsibilities of the Internal Auditor” de- 

scribes internal auditing as an independent appraisal activity which is 
carried on with the over-all objective of assisting management in the 
effective discharge of its responsibilities. 


To me the most important segment of this statement is the phrase, 
“assisting management.” What does this word assist mean? Webster says 
that assist means “To lend aid; help” 





and that help means “to furnish 
with relief; to aid in bringing about ; to change for the better.” It is readily 
seen from these definitions that if we are to assist management, then it 
is imperative that we produce something of value for management to use. 
Don’t misunderstand me, I do not wish to imply that valuable contribu- 
tions have not been made by internal auditors already; on the contrary, 
it never ceases to amaze me when I consider the giant strides that have 
been made in internal auditing. In order to appreciate what has been done 
all we need to do is to look at what the internal auditor was when he started 
and then at what he is today. 


Mr. V. M. Kelly very aptly made this comparison when he described 
the internal auditor of today by saying that he “. . . . is not the ‘figure 
checker’ of yesterday. The dull and endless routine of checking freight 
bills, extending invoices, footing inventories with monotonous succession 
is past. Today the internal auditor is engaged in analytical studies, scientific 
sampling, appraisal of progress, advisory aid to management, and is one 
of the important tools of management.” 


If by hard work and dedication of the internal auditors before us our 
profession has risen in such a short time from that of “figure checker” to 
that of being an “important tool of management,” then obviously the 
changes and advances that are being made by businesses today demand 
that we search continually for better ways to fulfill our responsibilities— 
we must expand our technical knowledge and improve our appraisal and 





* Presented at a Tulsa Chapter meeting. 
1V. M. Kelly, “What Top Management Expects from the Internal Auditor.” Speech 
before Internal Auditing class, Tulsa University—Downtown Division, May 1, 1957. 
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judgment abilities. 1 am sure that you agree with me that one of the most 
important characteristics that a good auditor must have is the ability to exer- 
cise sound judgment. Many times decisions which are made by management 
are based on information furnished by internal auditors; and consequent- 
ly, the results of these decisions are reflections of the auditor’s judgment. 


You have heard many times and read countless articles which describe 
the attributes of executives and top managers. One of the characteristics 
of a successful executive seems to be the ability to exercise good judgment. 
I bring this up because I believe there is a misconception about the relation- 
ship of statistical sampling and the auditor’s judgment. Internal auditing 
has always been presented to me as an excellent training ground for future 
management positions. This idea has not all been propaganda by internal 
auditors either ; for instance Mr. Herbert P. Buetow, President of Minnesota 
Mining and Manufacturing Co., said that he expected internal auditing 
to “be a proving ground for developing men suitable for promotion to 
responsible positions outside of auditing.” 


If the above statements are correct, that is, that one of the traits suc- 
cessful executives have is the ability to exercise good judgment, that a 
good auditor must have the ability to exercise sound judgment, and that 
the internal auditing profession is a desirable avenue to follow for promo- 
tion to responsible positions, then I am certain that you and I, as internal 
auditors, do not wish to jeopardize our future by using anything that would 
prevent the development of our judgment ability. As previously mentioned, 
there seems to be a misunderstanding about the relationship of statistical 
sampling and the use of judgment. There has been so much said and 
written in general the past few months tbout statistical sampling that I 
can well imagine how some of you feel about it. You probably have reacted 
as I did about two years ago when my progressive boss, Mr. King Smith, 
returned from a seminar and presented this subject of statistical sampling 
to me. After making limited inquiries about the subject to various people, 
I came to the conclusion, based on their comments, that the statistical ap- 
proach to auditing took away the necessity of the auditor using his judg- 
ment characteristic. About this same time I was reading a few of the 
articles being published, and I didn’t understand the “language” of statistics. 
My feelings at that time were of utter confusion and resistance. I bet the 
majority of you feel about the same way at this time about statistical 
sampling. 


2 Herbert P. Buetow, “What Management Expects of the Internal Auditing Depart- 
ment.” THe INTERNAL AvupiTor, March 1956, p. 50. 
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Of course I can now see the mistakes that were made, and I hope that 
you have not or will not make the same ones. The first mistake was that 
insufficient examination led to my jumping to the conclusion that statistical 
sampling was going to constitute the major portion of auditing ; and there- 
fore, the auditor’s judgment would be replaced by mathematics. The other 
mistake was made when articles were read which explained the application 
of statistical sampling instead of starting with the reading of articles which 
explained the basic theory supporting its use. 


After having an opportunity to review material of a more elementary 
nature, participate in a short statistical sampling correspondence course,” 
and attend a statistical sampling conference held by Gulf Oil Corporation, 
a rather reassuring conclusion was reached. I am now of the opinion that 
statistical sampling cannot replace the internal auditor’s judgment, but it 
can assist him in making decisions which will improve the quality of his 
judgment. Also, statistical sampling cannot be applied to the majority of 
the segments of operations examined by internal auditors in businesses of 
today. This last statement, that statistical sampling cannot be applied to 
the majority of the segments of operations examined by internal auditors 
in businesses of today, is one of the main reasons why I believe we should 
be studying and exploring the uses of statistical sampling in auditing at 
this time. We cannot use it the majority of the time because the volumes 
(or universes) are not large enough to permit the theories involved in 
statistical sampling to function normally. However, it appears that in the 
future the already tremendous reporting and record-keeping requirements 
of governmental bodies will increase; and coupled with the fact that there 
is a tendency for companies to consolidate their record-keeping locations, 
this may lead to volumes which will permit the application of statistical 
sampling to a much greater number of the segments of operations examined. 


The reference to paper work and records brings up an interesting 
problem which is of concern and is receiving attention from accountants 
today. The problem is how, with the increasing amount of paper work 
and reports, to maintain the desired level of quality in paper work and at 
the same time keep the cost of maintaining the quality within reason 
Many companies, especially those with “growing pains” during the past 
15 or 20 years, have permitted the quality of paper work to be sustained 


“Statistical Sampling Correspondence Course” especially prepared for the Comptroller 
Department of Gulf Oil Corporation by Richard M. Cyert and James C. March. 





ELLIS W. BERRY is Assistant Manager of the Internal Auditing Department of 
Warren Petroleum Corporation. Mr. Berry received his B.S. degree in Business 
at the Oklahoma Baptist University and has done graduate work in accounting at 
the University of Tulsa. He is a member of Tue Institute or INTERNAL AUDITORS. 














Student's Department 91 


by having the paper work prepared by one individual, checked by another 
individual, and in some instances even rechecked by another. Of course 
for most purposes the cost of obtaining quality by this method is prohibitive. 
This problem is being challenged with a technique known as statistical 
quality control. As you no doubt recognize, this is a carry-over of product 
quality control techniques which have been used for several years by indus- 
trial management. I believe that the use of this type of control is still 
another reason why internal auditors should be studying statistical sampling 
theory today. They must study now in order to be prepared for what may 
come tomorrow. 


It would seem that where a procedure requiring the use of statistical 
quality control of a paper work operation was in effect, that an auditor 
would have to be familiar with statistical sampling theory in order to be 
able to properly analyze the procedure and determine whether or not the 
quality of the internal control standards was being maintained. Of course 
the installation of a procedure involving statistical quality control applica- 
tion to paper work operations would probably not be the duty of an internal 
auditor ; however, as pointed out above, and the reason that it is mentioned 
here, is that this type of sampling application would have to be reviewed 
by the auditor the same as any other procedure. 


Sampling, where applicable, has long been used by auditors as an ac- 
cepted auditing procedure. The volume of data produced in business does 
not permit, in most cases, a 100 per cent review and audit of all the records 
and supporting documents. Because of the large volumes of data, auditors 
must make rather difficult decisions at times in determining the selection 
of a sample and its size. Because of these problems, statistical sampling 
has been introduced to auditing. What is statistical sampling? Mr. E. W. 
Gaynor of the United States Army Audit Agency described it thusly: 
“Statistical sampling is essentially a scientific method of prediction. A 
sample is drawn; on the basis of the information produced by the sample, 
an inference is made concerning the characteristic being measured; and 
finally, a conclusion is drawn concerning the attributes of the entire group 
or lot from which the sample was selected. It is a scientific expression of 
logical thinking. . . . The difference between haphazard or unsystematic 
test checking or sampling and statistical sampling is primarily the fact that 
the latter, because it recognizes elements of risk, protection desired, and 
probabilities involved, measures the degree of variation that can be expected 
under given conditions.’ 





*E. W. Gaynor, “The Application of Statistical Sampling Techniques to Auditing,” 
Tue Internat Avupitror, December 1956, pp. 11-12. 
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Perhaps the best way for us to appreciate statistical sampling a little 
more is to consider a simple example. Let’s assume that we have a group 
of 10,000 invoices, which will be our universe. Also, based on past experi- 
ence the proportion of errors in our invoices is usually about 5 per cent. 
I am using the term “error” to mean only—that an invoice is not correct. 
In this example we are not considering the amount of money that an invoice 
is in error, only whether it is correct or incorrect. Statistical sampling can 
be used when considering error amount and in an actual audit we would 
be interested in amount as well as number. 


Our problem at this point would ordinarily be to estimate how many 
invoices we need to review in order to arrive at a conclusion as to the 
condition of all 10,000 invoices. Statisticians tell us that if we will use 
certain statistical methods, we can determine a sample size which will give 
us an estimate of the error rate in the universe of which we can be sure 
99 times out of 100 (called the 99 per cent confidence level) is within 1 
per cent, 2 per cent, or whatever precision we desire, of the true error rate 
in the universe. 


In our example of 10,000 invoices, if we desired precision of 2 per cent 
and a confidence level of 99 per cent, then our sample size would be 734 
invoices. 


When an auditor, by the use of scientific statistical sampling techniques, 
can say, “I am sure that 99 times out of 100 the true error rate of the 
universe is within 2 per cent of my estimated error rate,” then there is 
no doubt in my mind but what a very valuable tool is at the auditor's 
disposal. 


The use of this type of a tool not only improves the quality of an audi- 
tor’s judgment; but when the occasion demands it before management, it 
lends itself to objectively supporting his judgment. 


Yes, statistical sampling is a valuable tool, it is also new to most of us 
and because of the newness, it is difficult to use. However, auditors must 
overcome the prejudices they hold against the application of statistical 
sampling simply because it is difficult to use. The possible benefits to be 
gained are too great to be ignored. 
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READINGS OF INTEREST 
TO INTERNAL AUDITORS 


HANDBOOK OF INTERNAL AUDITING 
Internal Auditors Association of Japan 


We have received a handbook prepared by the Internal Auditors 
Association of Japan for use by auditors in that country. This hand- 
book consists mainly of case examples of actual practice and should 
be an excellent reference book for business men. It describes all 
areas of internal auditing, including organization of an internal audit- 
ing department, and all types of businesses. Also included is an 
up-to-date appendix which contains the results of a survey on the 
status of internal auditing in Japan, discussion of internal auditing 
standards in America, examples of the regulations of internal audit, 
and a full bibliography. 


It is unfortunate that so many members of Tue Institute will not 
be able to read this handbook, as it is written in Japanese. However, 
congratulations should go to the Editorial Committee of the Internal 
Auditors Association of Japan for producing such a fine and worth 
while contribution to the literature of internal auditing. 


Internal Auditors Association of Japan 
Matsuishi Bldg 

3, 4-Chome, Ginza-Higashi 

Chuo-ku, Tokyo, Japan 


MODERN RETAIL SECURITY 
S. J. Curtis, The Hudson Company 


Increasing store losses have given new prominence to the store 
security departments. No longer do they consist of a man in a derby 
smoking a big black cigar, but rather of trained administrators. 


This book, written by the security superintendent of the J. L. Hudson 
Company, is an encyclopedic compilation of old and new ideas for 
increasing store security—for preventing crime as well as apprehend- 
ing criminals. 


The three main sections of the book are detection, prevention, and 
job descriptions, manuals and surveys. A wide range of subjects 
is covered under these titles, including special articles by Dr. Karl 
Menninger, psychiatrist, and Dr. Fabian L. Rouke, expert on crimi- 
nal psychology, and an exhaustive index will prove of great value 
to all readers. 


Many of the controls and systems suggested in this book are in the 
province of internal auditing. The author suggests that some of these 
can and should be worked out as a joint effort of Internal Audit and 
the Security Department. 


Charles C. Thomas 
301-327 East Lawrence Avenue 
Springfield, Illinois 

1118 pages. Price $25 
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Subject: THE NEED FOR A NEW RULE ON INDEPENDENCE 
By: Thomas G. Higgins, Arthur Young and Company 
Published in The Journal of Accountancy, January 196] 
(270 Madison Avenue, New York 16, New York) 


A subject of great current concern to CPAs is the proposed amend- 
ment of the American Institute of CPAs Rule 13, which relates to 
financial and other interests of CPAs in client corporations. Is it 
unethical for CPAs to be officers, directors or stockholders in corpo- 
rations whose financial statements they certify? Does it impair their 
independence? Does it breed lack of confidence on the part of the 
public ? 


The American Institute’s committee on professional ethics prepared 
an amendment to-the present rule in an effort to cover these points. 
This amendment has aroused great controversy in the profession. In 
this article one of the authors of the amendment answers some of the 
specific questions raised in objection to the proposal and sets forth 
the reasons he believes such a proposal should be adopted. 


Subject: THE STRANGLEHOLD OF PAPER 
By: The Earle of Courtown, I.C.1. Limited 
Published in The Cost Accountant, November 1960 
(63 Portland Place, London, W.1, England) 


The growing size and complexity of business has led to an even 
greater increase in the amount of paper. Good communications within 
a business are vital, and more figures or other information can lead 
to a better management. However, the great mass of paper now 
existent is more apt to bury management than aid it. 


In this article Lord Courtown describes the reasons for the inundation 
of paper and discusses the needs of better management. After pointing 
out that much clerical work is ill-designed and unnecessary he out- 
lines eight fields to which attention should be paid—purpose of the 
work, organization structure, communication, stock records, filing 
and destruction of documents, use of the statistical method, abolition 
of procedures and measurement of office work. 


Administration should be considered as a means to an end, not as 
an end in itself, and should be kept under review. A well-designed 
administration remains flexible. Rigid standardization often tends to 
both frustration and even higher administration costs. 


Subject: INSTALLATION TECHNIQUES FOR ELECTRONIC SYSTEMS 
By: Virgil F. Blank, Haskins & Sells 
Published in The Controller, December 1960 
(Two Park Avenue, New York 16, New York) 
Installation techniques for electronic data processing systems utilize 


many of the normal systems and procedures techniques. The first step 
is the feasibility study. Two areas must be surveyed—the manual 
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clerical cost and any mechanized work, such as punched card sys- 
tems. Data must be gathered on all of the processes involved in each 
operation, cost per employee and total cost. After all of the facts 
have been gathered they must be analyzed, with a view to whether 
the processes under study are susceptible of mechanization. Next is 
development of a preliminary systems design through flow charts 
covering all phases and costs. Then come reporting of findings, sell- 
ing the system and finally development of an operating procedures 
manual. 


The author points out that the installation of an EDP system requires 
the combined talents of many persons working together as a team. 
The team must become intimately acquainted with all of the mechanics 
of the system and also must work so closely with management that 
the latter feels practically part of the group. 


THE ORGANIZATION OF INTERNAL AUDIT IN LOCAL GOVERN- 


MENT IN ENGLAND AND WALES 

J. V. Miller, Gloucestershire County Treasurer’s Dept. 

Published in Local Government Finance, October 1960 
(1 Buckingham Place, Westminster, S.W.1, England) 


“Internal audit is an integral part of the financial structure of local 
authorities in England and Wales,” where it has been well established 
in finance departments since 1939. Most of the literature on internal 
audit in local government has dealt with methods of audit, particularly 
in relation to prevention and detection of fraud. This article is in- 
tended to deal with organization of internal audit on a much broader 
basis. 


The author details qualifications of an internal auditor, the position 
of the chief internal auditor, audit morale, organization of a section, 
problems of audit administration—both practical and in personal rela- 
tionships. Included under these headings are discussions of relations 
with the staffs of the departments, authority for and limits of sections’ 
activities, size of the audit staff and training required. 


Subject: MANAGEMENT OF DIFFERENCES 
By: 


Warren H. Schmidt, University of California, and Robert Tannen- 


baum, UCLA 


Published in Harvard Business Review, November-December 1960 


(Soldiers Field, Boston 63, Mass.) 


Differences among people can work to the advantage of the com 
pany through exposure of new ideas and creative approaches to a 
problem. They can also cause discord, tension and disruption of 
work. Which result occurs can depend on how the manager handles 
the situation. 


This article discusses various ways to diagnose an issue and its 
causes—what is the nature of the difference, what factors underlie 
the difference, what is the stage of evolution?—and possible ap- 
proaches to solution. Should the differences be avoided, or repressed, 
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turned into conflicts, or made creative? Under each of these headings 
the authors discuss when the alternative is appropriate and the 
difficulties and dangers inherent in the particular approach. Also 


discussed are the ways in which the manager can turn potential or 

actual differences into problem-solving vehicles and the further prob- ; 

lem of managerial objectivity. i> 
* 
* 
- 





EMPLOYMENT SECTION 


This employment section is offered as a service to members and 
others who may be seeking employees or who may be interested 
in new employment. All replies should be addressed to the 
advertiser—if name is given—or addressed to The Institute 
of Internal Auditors, 120 Wall Street, New York 5, N. Y., with 
reference to the Box “E” number. Space rate upon request. 





\CCOUNTANT WANTED 
Opening in Systems and Audit Section, private corpo- 
ration with Government contract, located in southwest 
near Santa Fe, New Mexico. Prefer man with some ex- 
perience in systems work. Apply to Employment Man- 
ager, The Zia Co., Los Alamos, N. M. 
































Collections of Conference Papers 


WIDENING OUR HORIZONS 
Eighteenth Annual Conf: 5 popers Price $1.50 





OPERATIONS AUDITING 
Seventeenth A | Conf. 5 papers Price $1.50 





EARNING OUR OPPORTUNITIES 
Sixteenth Annual Conference—6 papers Price $1.50 


PROMOTING PROFESSIONAL PROGRESS 
Fifteenth Annual Conference—8 papers Price $1.50 


INTERNAL AUDITING FOR PROFIT 
Fourteenth Annual Conference—7 papers Price $1.50 





Transfer Binders — for The Internal Auditor 
Box Binder to Hold Eight Issues (two years) Price $3.00 


A circular describing Institute publications will be sent upon request. Orders should be 
sont to: THE INSTITUTE OF INTERNAL AUDITORS, 120 Wall Street, New York 5, N. Y. 





Other Publications on Internal Auditing 
(Write to publisher for further information) 


INDUSTRIAL INTERNAL AUDITING 
by W. A. WALKER and W. R. DAVIES 
McGraw-Hill Company—330 W. 42nd Street, New York 18, N. Y. 


BASIC INTERNAL AUDITING 
by JOHN B. THURSTON 
International Textbook Company—Scranton, Pa. 


INTERNAL CONTROL STANDARDS AND RELATED AUDITING PROCEDURES 
by WALTER H. KAMP and JAMES A. CASHIN 
Brock and Wallston—39 Atlantic Street, Stamford, Conn. 


INTERNAL AUDITING 
by VICTOR Z. BRINK and JAMES A. CASHIN 
Ronald Press—15 E. 26th Street, New York 10, N. Y. 


INTERNAL AUDITING 
by W. W. BIGG and J. O. DAVIES : 
Essential Books Inc.—1600 Pollitt Drive, Fair Lawn, N. J. 
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INTERNAL CONTROL AGAINST FRAUD AND WASTE 
by BRADFORD CADMUS and ARTHUR J. E. CHILD 
Prentice-Hall—Englewood Cliffs, N. J. 


INTERNAL AUDITING IN INDUSTRY 
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